Emergency mechanical and communication systems and methods for aircraft

ABSTRACT

A system for rapid separation of a flight data recorder from an aircraft comprises a flight data recorder; an emergency detection system comprising a plurality of sensors for detecting flight parameters and at least one computer processor for analyzing the flight parameters and determining, based on the analysis, that an emergency event is occurring; a rapid ejection system comprising a pneumatic system configured to eject the flight data recorder out of an opening in a housing and through the skin of the aircraft when the emergency detection system determines that the emergency event is occurring; and a soft landing system, said soft landing system being attached to the flight data recorder and configured to reduce force of impact upon landing and increase buoyancy of the flight data recorder.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.15/060,367, titled EMERGENCY MECHANICAL AND COMMUNICATION SYSTEMS ANDMETHODS FOR AIRCRAFT, filed on Mar. 3, 2016, which claims the benefit ofU.S. Provisional Application No. 62/276,776, titled EMERGENCY MECHANICALAND COMMUNICATION SYSTEMS AND METHODS FOR AIRCRAFT, filed on Jan. 8,2016; U.S. Provisional Application No. 62/156,147, titled METHOD, SYSTEMAND APPARATUS FOR RECORDING FLIGHT DATA AND A RAPID SEPARATION ANDEJECTION SYSTEM FROM AN AIRCRAFT, filed on May 1, 2015; U.S. ProvisionalApplication No. 62/146,916, titled METHOD, SYSTEM AND APPARATUS FORRECORDING FLIGHT DATA AND A RAPID SEPARATION AND EJECTION SYSTEM FROM ANAIRCRAFT, filed on Apr. 13, 2015; U.S. Provisional Application No.62/129,702, titled METHOD, SYSTEM AND APPARATUS FOR RECORDING FLIGHTDATA AND RAPID SEPARATION AND EJECTION SYSTEM FROM AN AIRCRAFT, filed onMar. 6, 2015; and U.S. Provisional Application No. 62/128,950, titledMETHOD, SYSTEM AND APPARATUS FOR RECORDING FLIGHT DATA AND A RAPIDSEPARATION AND EJECTION SYSTEM FROM AN AIRCRAFT, filed on Mar. 5, 2015.Each of the foregoing applications is hereby incorporated by referenceherein in its entirety.

FIELD

This disclosure generally relates to systems and methods for recordingaircraft flight data and retrieval of flight data recorder in the eventof an aircraft mishap or other emergency situations.

BACKGROUND

Three commercial jets went down in 2014 and the protracted searches forthe black boxes are presenting new demands for aviation security andrescue. In the high profile disappearance of Malaysia Airlines flightMH370, search and rescue were unable to locate where the plane crashedexactly and the black box is still yet to be found. The disappearance ofMalaysia Airlines MH370 triggered extensive discussions within theaviation community. In view of the foregoing, there are needs forsystems and methods for retrieving the data found in a flight datarecorder or black box more quickly and for obtaining more informationabout the circumstances leading up to a plane crash.

SUMMARY

In response to these needs, disclosed are systems and methods designedto allow flight data recorders to be located and retrieved easily afteran aircraft mishap, and to provide visual images and other usefulinformation of the aircraft during or immediately after the mishap whenthe aircraft is still in the air. In some embodiments, the systems andmethods are designed to record visual images of the aircraft at adistance away from the aircraft during a catastrophic event so as tocapture a wider field of view of the aircraft and its surrounding area.The systems and methods can provide a rapid ejection of the flight datarecorder when the aircraft experiences a catastrophic event and cancause the flight data recorder to follow the aircraft and continuerecording images at a distanced away for a period of time after beingejected from the aircraft. The recorded images and information can beimmediately transmitted to a satellite or other communication device topreserve the data in case the flight data recorder is later damaged. Insome embodiments, the systems and methods provide a soft landingmechanism for the ejected flight data recorder that reduces damage tothe recorder due to impact from landing either on water or land. In someembodiments, the systems and methods provide a flight data recorder thatconserves battery power so that it can emit distress signal for longerthan 30 days, or longer than 60-90 days in some implementations.

In one implementation, the systems and methods include rapid separationand ejection of flight data recorders and recording of flight data forretrieval. In some embodiments, a system includes a data analysis andprocessing portion to determine whether the aircraft is experiencing anabnormal flight event, such as a catastrophic event that is likely tolead to a crash. If such an event is detected by the processing portion,the system can deploy a towed camera system and ejects a soft-landingand floating system including an emergency flight data recorder (EFDR),which contains information recently retrieved from the aircraft's blackbox. The towed camera portion can be dragged behind the aircraft by acable, which can also serve as a communication link with the processingportion and EFDR. The soft-landing and floating system can include aninflation system, spring-loaded parachute that can be ejected by thespring for fast inflation and soft landing, radio beacon andcommunication system that allows the system to communicate with a relaysatellite. As such, events occurring with the aircraft can be rapidlyreported back to authorities so that rescue and recovery efforts canbegin immediately.

In a preferred embodiment, the system ejects a parachutable datastorage/transmitter and a towed or pull-type image tracking system (ortowed video tracking system) configured to capture rear-view videoimages of the last few minutes of the plane prior to a crash afterejection from the tail section of the plane. The towed image trackingsystem transfers the information of the last few minutes of the plane'sposition and the black box data, as well as video footage to theparachuting data storage/transmitter unit. Data from the image trackingsystem and data storage/transmitter unit may be transmitted through thesatellite to cloud or internet technology. This can provide backup forthe data. It can track the aircraft, capture the images and transmit thedata away from the aircraft after ejection. It also can also capture theimages of the whole aircraft and get more information about the aircraftthan cameras fixed on the plane. The data storage/transmitter unit canalso save a copy of the data and can be equipped with a parachute andinflation system to enable it to stay afloat at sea. The inflationsystem can also protect data storage/transmitter unit hardware whenlanding on hard surfaces, e.g., rocks and the like. It also transmits orbroadcasts distress signals to help rescue teams locate its position.

According to one aspect, there can be an emergency system that serves asa useful supplement to existing black box designs that sink with theplane. The emergency system not only offers valuable video footage ofthe plane in the last few minutes to vividly reflect details leading upto the crash, it also offers an alternative deployable “black box” thatintelligently ejects or separates itself from or out of the plane, whichmakes the black box search much easier. In some embodiments, the systemejects out of the plane and then separates from the plane. Afterseparation, the “black box” soft-lands and keeps afloat, which alsomakes the black box search easier. Its data transmission function to theinternet or cloud also considerably increases the survivability offlight data when there's difficulty finding the black box in extremeenvironments. In addition, its ability to transmit the ongoing positionof the plane to the satellite before the crash also ensures prompt andaccurate knowledge of the crash location and/or plane trajectory priorto the crash.

In another aspect, some embodiments of the invention address thefollowing needs for collecting and retrieval of flight data in the fewmoments leading up to a plane crash:

-   -   defining a critical point in time for triggering the ejection of        the EFDR and separation of the towed camera tracking and image        capturing system (TITCS) for later retrieval;    -   achieving a rapid separation and/or ejection; and/or    -   the instantaneous or rapid transmission data (in some        embodiments, large amounts of data) from the aircraft's black        box and/or towed tracking and image capturing system to the        EFDR.

In response to the foregoing needs there are, in some embodiments, asystem for ejecting and separating an emergency flight data recorder(EFDR) from an aircraft and a tow-type image tracking and capturingsystem (TITCS)/pull-type picture tracking and pick-up system formonitoring the aircraft condition during an emergency. This systemcomprises sensors, an emergency situation diagnosis processor (ESDP), ahigh-pressure gas ejection module (HGEM) and/or a spring-loadedextraction parachute (SEP).

The system, which for present purposes is called an intelligent rapidejection and separation system (IRESS), has its own power module. If theaircraft is in an emergency (for example an imminent crash, orexplosion), the HGEM can be triggered. In an embodiment, the EFDR andthe TITCS can be ejected together by the HGEM from the aircraft. The SEPcan be inflated (or deployed) thereby producing a transferring forcethat pulls the EFDR out of the aircraft. During the process of ejectingthe EFDR from the aircraft, the EFDR can also separate from the TITCS,preferably this can be done automatically. Alternatively, the TITCS canbe separated from the aircraft manually or automatically. The EFDR canbe enclosed by a housing. The housing can comprise an opening. Thehousing can be entirely sealed and have no opening. The EFDR can land onthe water, a locking module between the SEP and the housing can beunlocked, thereby separating the SEP from the housing.

According to an embodiment of the present disclosure for ejecting andseparating the EFDR and the TITCS from an aircraft, an apparatuscomprises one or more of sensors, a detachable joint, a towed detachablecable, an emergency situation diagnosis processor (ESDP), ahigh-pressure gas ejection module (HGEM) and a spring-loaded extractionparachute (SEP). Several sensors can be provided for collecting flightparameters. An ESDP can be provided for collecting and diagnosingwarning signals and/or other signals coming from the aircraft. A HGEMcan be provided for quickly ejecting the EFDR and the TITCS from theaircraft together, preferably rapidly. A SEP can also be provided forpulling the EFDR out of the aircraft, preferably rapidly. Pluggableunits (which disconnect under the effect of tensile forces) can be usedto automatically separate components, parts or subsystems in flight. Thedetachable joint can be used to connect the towed detachable cable(connected to the TITCS) to the aircraft, and also to unlockautomatically or manually the towed detachable cable (TITCS). Manualunlocking can be preferably available to the pilot. A housing can beprovided for enclosing the EFDR, such as for protection. A lockingmodule can be provided for connecting the SEP and the housing. When theEFDR lands on water, the locking module can be unlocked, therebyseparating the SEP from the housing. A power module may be provided tosupply power for the whole system.

Several flight parameters, warning signals from the aircraft and pilotoperational signals can be chosen as trigger conditions for ejection andseparation. When the aircraft is in an emergency (for example animminent crash, or an explosion has occurred), the HGEM can be activatedby the ESDP or the sensors or the pilot thereby ejecting the wholesystem (including the EFDR and the TITCS) from the aircraft. The surfacesealing mechanism (SSM) will in some embodiments fill the launching holein aircraft surface to maintain the laminar flow, for example in case ofinadvertent deployment. After the EFDR and TITCS are both ejected fromthe aircraft, they can be disconnected from each other automatically.There can be a pluggable unit to connect EFDR with TITCS, which can beadapted to automatically disconnect the two modules from each other whena threshold tensile force is present in the connecting cables. In anembodiment, the TITCS remains connected with the aircraft by a toweddetachable cable. This cable can also provide a data link between theTITCS and the plane. However, if needed the TITCS can also be separatedfrom the aircraft automatically or disconnected manually by a pilot.When the EFDR lands on water, in order to disconnect the SEP from thehousing (e.g., to protect the EFDR from being dragged deeper into thewater by the SEP), a water sensor triggers the locking module to unlocka connection between the housing (which holds the EFDR) and the SEP,thereby to disconnecting the SEP from the housing.

In response to the foregoing needs there can also be provided anapparatus for achieving a soft-landing and floating of an emergencyflight data record (EFDR) comprising a housing, a shock-absorbing fillermaterial, an inflation subsystem, an airbag subsystem, a sleeve and aSEP. The emergency inflatable soft-landing system (EISS), which holdsthe EFDR, can be mounted on or in an aircraft. A possible first locationcan be generally at the rear part of the aircraft and a possible secondlocation can be at the backward portion of the tip of the vertical tail.A housing of the EISS defines a compartment for enclosing the EFDR, theinflation subsystem, the filler material and data cables. The filler canbe provided for filling the space between the components enclosed by thehousing. The airbag subsystem can be placed on the outside surface ofthe housing. The airbag subsystem and/or the housing can also be wrappedand/or enclosed within a sleeve. The SEP can be connected with thehousing by a locking module. When an aircraft is in an emergency state(e.g., a crash is imminent, or an explosion has, or is about to happen),the EFDR held by the EISS is ejected from the aircraft together with theTITCS. Then, the EFDR is disconnected from the TITCS, for example, bythe SEP when a tensile pulling force on the housing by the SEP isgenerated above a threshold level. In some embodiments, the thresholdlevel is set at a level less than the anticipated tensile force thatwould be generated by the SEP when the aircraft is flying at a normalflight speed (e.g., a cruising speed). In some embodiments, thethreshold level is set at a percentage of the anticipated tensile forcethat would be generated by the SEP when the aircraft is flying at anormal flight speed, such as at 10%, 25%, 50%, or 75% of the anticipatedforce generated by the SEP. A lower percentage, such as at or below 50%,can be desirable in some embodiments to enable separation of the EFDRfrom the TITCS even at flight speeds significantly lower than the normalor cruising flight speed. By having a threshold level set below theanticipated tensile or pulling force created by the SEP, the EFDR may becaused to separate from the TITCS shortly after the EFDR and TITCS areejected from the aircraft. For example, once the SEP has caused thecable or cables connecting the TITCS to the aircraft and the EFDR to theTITCS to become fully extended or substantially fully extended, the EFDRmay be caused to separate from the TITCS. In some embodiments, however,it may be desirable to have the EFDR remain connected to and/or towedbehind the TITCS for at least a period of time after ejection. In thatcase, it may be desirable to, for example, have a connector between theTITCS and EFDR that selectively enables the EFDR to remain coupled tothe TITCS even when the tension load created by the SEP is above thethreshold level. Then, upon a determination that the EFDR shouldseparate from the TITCS (such as due to the aircraft dropping below acertain altitude, the air speed dropping below a certain level, and/orthe like) the connector may be configured to separate the EFDR from theTITCS and/or to allow the SEP to separate the EFDR from the TITCS bygenerating a tensile load above the threshold level. In variousembodiments, separation of the TITCS from the aircraft and/or the EFDRfrom the TITCS may be accomplished in various ways. For example, asdiscussed above, a separation may automatically occur when a parachuteor other device generates a tensile load in a cable that is above athreshold value. In some embodiments, however, other methods may beused, such as a time delay mechanism that automatically causesseparation after a certain amount of time, and/or an altitude and/orspeed based mechanism that automatically causes separation when theaircraft's altitude and/or speed is above or below a certain thresholdlevel, and/or the like. Further, in some embodiments, manual separationmay be enabled, such as by a control that enables the pilot of theaircraft or other member of the flight crew to manually initiate aseparation of the TITCS from the aircraft and/or the EFDR from theTITCS. One reason for this may be, for example, to enable manualseparation after an inadvertent ejection and/or after the aircraft hasrecovered from an emergency situation and returned to normal flight. Insuch a situation, continuing to tow or drag the TITCS and/or EFDR behindthe aircraft could potentially be detrimental to flight safety and/orcould damage the body of the aircraft. After separation, the EFDR can bedecelerated during descent by the SEP. If the EFDR falls below a presetaltitude, the airbag subsystem can be preferably triggered by analtitude sensor and inflated by an onboard inflation subsystem thatprovides a soft-landing for the EFDR. If the EFDR lands on water, it canfloat by the inflated airbag subsystem. The SEP can be configured toautomatically separate from the housing when there is a water landing.

According to an embodiment of the present disclosure an apparatus fortransmitting flight data and positioning signals comprises one or moreof: three data links, a tow-type image tracking and capturing system(TITCS), an emergency flight data recorder (EFDR) and severaltransmitters. The first data link can be provided for transmittingflight data from the aircraft to the EFDR through the TITCS. The seconddata link can be provided for transmitting data between the EFDR and theTITCS. The third data link can be provided for transmitting flight data,SOS and positioning signals among search and rescue aircraft, the EFDR,a relay satellite, a cloud server and/or a ground control center. Tobuild these data links, several components can be, in the case of searchand rescue aircraft either already available or can be installed, or canbe installable upon on the TITCS and the EFDR. A data cable (with twopluggable units) can be provided to transmit data from the TITCS to theEFDR. A radio beacon can be provided for broadcasting an SOS andpositioning signal. A data upload antenna can be provided fortransmitting flight data to a cloud server. Video and/or still images,which can be captured by the TITCS, can be transmitted from the TITCS tothe data upload antenna after the EFDR has disconnected with the TITCS.A positioning module can be provided for gaining location coordinateinformation from satellites. A shield can be provided for wrapping theradio beacon and the data upload antenna inside. When the EFDR can beconnected with the TITCS, flight data can be transmitted from theaircraft to the EFDR through the TITCS. When the EFDR is disconnectedwith the TITCS, the EFDR can stop receiving flight data, and the imagescaptured by the TITCS can be transmitted to the EFDR by wirelesstechnology. When the EFDR lands, the radio beacon can be activated tobroadcast an SOS signal(s) and/or a positioning signal(s). Thepositioning module can be activated to search for satellites that canprovide location information. After a search and rescue aircraftreceives the SOS signal from the EFDR, the EFDR can start to transmitflight data to a cloud server available through a satellite. If thethird data link is established, a ground control center can control thedata transmitted through the satellite. If the EFDR fails to maintain adata connection with the satellite, the data upload antenna and thepositioning module can automatically shut down or go into a sleep modeor stop transmitting data for a period of time or go into some otherpower save mode to save battery energy.

According to an embodiment of the present disclosure an apparatus forimage tracking and capturing comprises a towed detachable cable, amulti-eyes video module, a DPTM, a stabilizing parachute, cables andconnectors. The TITCS can be mounted aboard an aircraft. A possiblefirst location can be generally at the rear part of the aircraft and apossible second location can be at the backward portion of the tip ofthe vertical tail. When the aircraft is in an emergency (for example, acrash is imminent, or an explosion is about, or has just taken place),the TITCS can be ejected from the aircraft and towed by the aircraftthrough the towed detachable cable. With this towed detachable cable,the TITCS can track the aircraft. In an embodiment, images of theaircraft can be captured by the multi-eyes or multi-lens or multi-cameravideo module which can be held by or coupled to a stabilizing parachute.The DPTM can be provided for processing and storage of these images. TheDPTM can also be provided for transmitting these images to the EFDR.

As such, some embodiments of the inventions disclosed herein aremethods, systems, and apparatuses for recording flight data, anintelligent rapid separation and ejection system, an emergencyinflatable soft-landing and floating system, an instantaneoustransmission of flight data and positioning signal system, and atow-type imaging tracking and capturing system.

According to some embodiments, a system for rapid separation of a flightdata recorder from an aircraft comprises: a housing comprising aninternal cavity and an opening; a panel coupled to the housing andconfigured to at least partially cover the opening of the housing whenthe panel is in a closed position; a spring that biases the panel towardan open position; a locking mechanism configured to retain the panel inthe closed position and selectively release the panel to enable thepanel to move toward the open position; a flight data recorderpositioned within the internal cavity of the housing and configured tobe ejectable from the housing through the opening of the housing; and anextraction parachute coupled to the flight data recorder.

In some embodiments, the extraction parachute is a spring-loadedparachute. In some embodiments, the spring-loaded parachute comprises aparachute spring that is held in a compressed configuration by the panelwhen the panel is in the closed position. In some embodiments, the panelis hingedly coupled to the housing, and wherein the open position of thepanel comprises a position wherein the panel is pivoted away from theopening. In some embodiments, the panel is removably coupled to thehousing, and wherein the open position of the panel comprises a positionwherein the panel is separated from the housing. In some embodiments,the spring is a torsion spring. In some embodiments, the spring is acompression spring. In some embodiments, the system further comprises: adescent control parachute coupled to the flight data recorder, thedescent control parachute comprising a larger total surface area thanthe extraction parachute. In some embodiments, the system furthercomprises: a pressurized gas source; a piston slidably coupled to thehousing and positioned to divide the internal cavity of the housing intoat least a first chamber and a second chamber, wherein the flight datarecorder and extraction parachute are positioned within the secondchamber; and a valve configured to selectively fluidly couple thepressurized gas source to the first chamber. In some embodiments, thepiston comprises at least one spring-loaded locking mechanism positionedat an outer radial surface of the piston and configured to automaticallyengage a recess of the housing when the piston reaches an end of strokeposition within the housing. In some embodiments, the piston comprisesat least four spring-loaded locking mechanisms and the recess is agroove in the housing. In some embodiments, the flight data recordercomprises a wireless transmitter configured to transmit logged data toat least one of the following: a satellite, a second aircraft, and awireless ground station. In some embodiments, the flight data recordercomprises a geolocation system, and the logged data comprises dataindicating a position of the flight data recorder. In some embodiments,the flight data recorder is configured to automatically limit loggeddata transmissions to conserve power when a stable wireless connectioncannot be maintained. In some embodiments, the system further comprisesan airbag mechanism coupled to the flight data recorder, the airbagmechanism comprising one or more inflatable airbags configured to bepositioned about the flight data recorder when inflated. In someembodiments, the airbag mechanism comprises a second housing having asecond internal cavity within which the flight data recorder ispositioned, and wherein the one or more inflatable airbags comprises atleast: a first annular shaped airbag positioned at a first end of thesecond housing; a second annular shaped airbag positioned at a secondend of the second housing; and a third annular shaped airbag positionedabout the second housing between the first and second annular shapedairbags. In some embodiments, the one or more inflatable airbags areconfigured to comprise sufficient inflated volume to keep the flightdata recorder and airbag mechanism buoyant in water. In someembodiments, the opening of the housing comprises a diameter less thanor equal to 25 centimeters. In some embodiments, the system furthercomprises: a detachment mechanism configured to detach the extractionparachute from the flight data recorder; and a sensor configured todetect a water landing, to enable the detachment mechanism to causedetachment of the extraction parachute after a water landing. In someembodiments, the system further comprises: a tracking device positionedwithin the internal cavity of the housing and configured to be ejectablefrom the housing through the opening of the housing, the tracking devicecomprising at least one camera; and a towing cable having a first endand a second end, wherein the first end is coupled to the housing orconfigured to be coupled to the aircraft, wherein the tracking device iscoupled to the second end of the towing cable, and the at least onecamera of the tracking device is positioned to enable capturing of oneor more images of the aircraft when the tracking device is towed behindthe aircraft in flight by the towing cable. In some embodiments, thetracking device and flight data recorder each comprise wirelesscommunication hardware configured to enable the tacking device towirelessly transmit data to the flight data recorder after ejection fromthe aircraft. In some embodiments, the system further comprises theaircraft, wherein the housing is coupled to the aircraft. In someembodiments, the housing is positioned in a tail portion of theaircraft. In some embodiments, the system further comprises: at leastone computer processor configured to: analyze data received from aplurality of sensors; determine, based on the analysis, that anemergency event is occurring; and initiate an ejection process thatresults in ejecting at least the flight data recorder. In someembodiments, determining that the emergency event is occurring comprisesdetermining that data received from at least two sensors exceeds athreshold level.

According to some embodiments, a system for rapid separation of a flightdata recorder from an aircraft comprises: a housing comprising aninternal cavity and an opening; a piston slidably coupled to the housingand positioned to divide the internal cavity of the housing into atleast a first chamber and a second chamber; a flight data recorderpositioned within the second chamber of the internal cavity of thehousing and configured to be ejectable from the housing through theopening of the housing; an extraction parachute positioned within thesecond chamber of the internal cavity of the housing and coupled to theflight data recorder; a pressurized gas source; and a valve configuredto selectively fluidly couple the pressurized gas source to the firstchamber.

In some embodiments, the system further comprises: a panel coupled tothe housing and configured to at least partially cover the opening ofthe housing when the panel is in a closed position; a spring that biasesthe panel toward an open position; a locking mechanism configured toretain the panel in the closed position and selectively release thepanel to enable the panel to move toward the open position. In someembodiments, the system further comprises: an aircraft, wherein thehousing is coupled to the aircraft and positioned with the opening ofthe housing adjacent an ejection panel that forms a portion of a skin ofthe aircraft. In some embodiments, the ejection panel is hingedlycoupled to a portion of the aircraft and spring loaded to bias themovable panel to an open configuration. In some embodiments, theejection panel comprises a reduced strength area configured to fracturewhen the flight data recorder is ejected from the aircraft. In someembodiments, the system further comprises: a tracking device positionedwithin the internal cavity of the housing and configured to be ejectablefrom the housing through the opening of the housing, the tracking devicecomprising at least one camera; and a towing cable having a first endand a second end, wherein the first end is coupled to the housing orconfigured to be coupled to the aircraft, wherein the tracking device iscoupled to the second end of the towing cable, and the at least onecamera of the tracking device is positioned to enable capturing of oneor more images of the aircraft when the tracking device is towed behindthe aircraft in flight by the towing cable. In some embodiments, thetracking device and flight data recorder each comprise wirelesscommunication hardware configured to enable the tacking device towirelessly transmit data to the flight data recorder after ejection fromthe aircraft.

According to some embodiments, an ejectable system for collecting datarelating to an aircraft in an emergency situation comprises: a housingcomprising an internal cavity and an opening; a tracking devicepositioned within the internal cavity of the housing and configured tobe ejectable from the housing through the opening of the housing, thetracking device comprising at least one camera; and a towing cablehaving a first end and a second end, wherein the first end is coupled tothe housing or configured to be coupled to an aircraft, wherein thetracking device is coupled to the second end of the towing cable, andthe at least one camera of the tracking device is positioned to enablecapturing of one or more images of the aircraft when the tracking deviceis towed behind the aircraft in flight by the towing cable.

In some embodiments, the system further comprises the aircraft, whereinthe first end of the towing cable is coupled to the aircraft. In someembodiments, the system further comprises a parachute coupled to thetracking device for stabilizing the tracking device when the trackingdevice is towed behind the aircraft in flight. In some embodiments, thesystem further comprises a stabilization device coupled to or formed aspart of the tracking device for stabilizing the tracking device when thetracking device is towed behind the aircraft in flight, thestabilization device comprising at least one aerodynamic flight surface.In some embodiments, the towing cable is configured for transmission offlight data from the aircraft to a storage device of the trackingdevice. In some embodiments, the towing cable comprises an outer portionfor towing the tracking device and a data cable positioned within theouter portion, the data cable configured for transmission of the flightdata from the aircraft to the storage device of the tracking device. Insome embodiments, the towing cable comprises at least one connectorconfigured to enable separation of the tracking device from the aircraftin flight. In some embodiments, the tracking device further comprises aplurality of additional cameras. In some embodiments, the system furthercomprises: a flight data recorder positioned within the internal cavityof the housing and configured to be ejectable from the housing throughthe opening of the housing, the flight data recorder comprising awireless receiver, wherein the tracking device comprises a wirelesstransmitter, and the tracking device is configured to transmit loggeddata to the flight data recorder wirelessly after the tracking deviceand flight data recorder have been ejected from the aircraft, andwherein the logged data comprises one or more of the following: imagescaptured by the at least one camera of the tracking device, flight datatransmitted from the aircraft to the tracking device through the towingcable, and data collected by one or more sensors of the tracking device.

According to some embodiments, an apparatus for tracking and capturingan image of an aircraft during flight comprises: a towing cableconnected at one end to an aircraft; a tracking device including aparachute connected at an opposite end of the cable, the parachute forproviding an installation dock for cameras; wherein when the parachuteis ejected from the aircraft, the parachute pulls the towing cablestraight by aerodynamic forces so as to trail behind the aircraft duringflight; wherein the parachute is configured to maintain a stableposition for the cameras during image capture, the image captureincluding recorded videos of the aircraft's flight attitude andstructural integrity during flight.

In some embodiments, the towing cable also is configured fortransmission of flight data from an aircraft flight data computer to astorage device located on the tracking device, the towing cable furthercomprising: a rope for towing the parachute from the rear part of theaircraft when the parachute is ejected out of the aircraft, and a datacable within the rope for transmitting flight data from the air datacomputer in the aircraft to the storage device. In some embodiments, theapparatus further includes a removable connection in the rear part ofthe aircraft. In some embodiments, the apparatus further includesseveral removable joints such as explosive bolt for disconnecting thetowing cable from the aircraft when a pulling force is exceeded.

According to some embodiments, an apparatus for controlling the rapidseparation and ejection system intelligently comprises: an emergencystate diagnosis processor for collecting flight data and pilot overridesignal and determining the state of the aircraft by analyzing thesedata; an aircraft state data collection device for collecting particulardata which can determine the emergency state alone; an electromagneticvalve for releasing high pressured gas from the tank when receivesemergency signal from the emergency state diagnosis processor; and anelectromagnet lock for lock the lid of the ejection device untilreceives emergency signal from the emergency state diagnosis processor.

According to some embodiments, an apparatus for ejecting a towingtracking device and an emergency flight data recorder out of theaircraft comprises: a high pressure gas tank and its gas pipe forstoring and transporting the high pressured gas; a piston for deliveringthe gas pulling force to the towing tracking device; a shell with a lidfor containing the piston, the towing tracking device and the emergencyflight data recorder.

According to some embodiments, an apparatus for opening the aircraftfuselage to clear a path for the ejection of the towing tracking deviceand the emergency flight data recorder comprises: a lid with a spring onthe aircraft fuselage for sealing the ejection device inside theaircraft and opening when the ejection is about to happen; an actuatorcylinder with a plug for locking the lid of the aircraft fuselage andunlocking it when the ejection is about to happen.

According to some embodiments, an apparatus for provided removableconnection for the cable of the towing tracking device comprises: a twosides removable data link connector for connecting data cables betweenthe emergency state diagnosis processor and the towing tracking device,when the pulling force of the data cable of the towing tracking devicereach certain level, the data link connector disconnects with the datacable; an install base for connecting the rope of the towing trackingdevice, when the pulling force of the rope reach certain level, theinstall base disconnects with the rope; an actuator cylinder with a plugfor installing the connector and separating the connector from theinstall base when the pilot decide so.

According to some embodiments, an apparatus for pulling the emergencyflight data recorder out of the aircraft comprises: a spring loadedextraction parachute for pulling the emergency flight data recorder outof the aircraft; a shield for contain the emergency flight data recorderwhen it is in the aircraft, this shield can be separated from theemergency flight data recorder by the inflation of the airbag.

According to some embodiments, an apparatus for pulling the emergencyflight data recorder out of the aircraft comprises: a spring loadedextraction parachute for pulling the emergency flight data recorder outof the aircraft; a locker on the end of the suspension line of thespring loaded extraction parachute and a plug in the emergency flightdata recorder for connecting the spring loaded extraction parachute withthe emergency flight data recorder; an actuator cylinder in theemergency flight data recorder for pulling the plug back in to separatethe spring loaded extraction parachute; a water sensor on the emergencyflight data recorder for controlling the actuator cylinder when theemergency flight data lands into the water.

Some embodiments comprise an apparatus for containing the emergencyflight data recorder, the gas tank and other major components andprotecting these components from certain level of impact, fire andpuncture.

According to some embodiments, an apparatus for storing compressed gasand inflating the air bag comprises: compressed gas tanks for storinghigh pressured gas; several gas pipes for transferring compressed gasfrom gas tank to the airbag subsystem; several valves for controllingthe compressed gas tank, it releases gas from the gas tank when thesoft-landing device is ejected out of the aircraft.

According to some embodiments, an apparatus for providing adecelerating, soft-landing and floating ability for the emergency flightdata recorder comprises: an airbag subsystem of airbag-parachutesubsystem for providing floating ability when the emergency flight datarecorder crashes in the water, it also absorbs the impact energy whenthe emergency flight data recorder crashes in the water or on thecircle-around; a parachute of airbag-parachute subsystem for providingaerodynamic drag for the emergency flight data recorder to slow down thelanding speed. The aerodynamic shape of the airbag subsystem can providea certain level of drag force, however if the emergency flight datarecorder is dropped from air high enough, without the canopy the airbagwouldn't slow the emergency flight data recorder down enough so that theair bag can survival in the impact of crash; several suspension line forrestraining the canopy to a certain form during the landing process. Insome embodiments, the apparatus further comprises a suspension linesystem for providing connection between the parachute and the airbagsubsystem and helping the canopy to maintain the design aerodynamicshape when it is fully inflated.

According to some embodiments, an apparatus for arrangement of gas tankscomprises a multi-gas-tank arrangement for inflating airbags.

According to some embodiments, an apparatus for transmitting flight datato the emergency flight data recorder when the emergency flight datarecorder is ejected comprises: a data cable which connects the aircraftto the towing tracking device for transmitting fight data from theaircraft to the towing tracking device; a data collector in the towingtracking device for collecting flight data and the video data andsending these data to the transponder in the towing tracking device; atransponder in the towing tracking device for transmit data to theemergency flight data recorder through wireless technology.

According to some embodiments, an apparatus for receiving flight dataand transmitting flight data to the cloud sever through a satellitecomprising when the emergency flight data recorder lands in the water oron the ground comprises: a data upload antenna in the emergency flightdata recorder for receiving flight data from the towing tracking deviceand transmitting flight data to the satellite; a GPS/BEIDOU module inthe emergency flight data recorder for searching satellite to providelocation and automatically shut down the data upload antenna when itcan't maintain a stable connection with the satellite.

Some embodiments comprise an apparatus in the emergency flight datarecorder for providing a SOS and GPS/BEIDOU signal for locating theemergency flight data recorder.

In some embodiment, the apparatus further comprising a means forinstantaneously transmitting real-time data in both ways.

According to some embodiments, an apparatus for tracking and shootingvideo picture to the aircraft comprises: a parachute for providing aninstall base for cameras, when the parachute is ejected out of theaircraft, it pulls the towing cable straight by the air dynamic forceand keeps cameras stable in air for better quality video picture;several video cameras for recording the flight altitude and thestructure integrity of the aircraft.

In some embodiments, a towing cable for towing the parachute andtransmitting flight data to the tracking device comprises: a rope fortowing the parachute from the rear part of the aircraft when theparachute is ejected out of the aircraft; and a data cable within therope for transmitting flight data from the air data computer in theaircraft to the tracking device. In some embodiments, an apparatus forproviding removable connection in the rear part of the aircraftcomprises: several removable joints such like explosive bolt fordisconnecting the towing cable from the aircraft during a certainpulling force.

According to some embodiments, a system for rapid separation andejection from an aircraft comprises: sensors comprising at least anaccelerometer, airspeed, and altitude sensor; data analyzing andprocessing system comprising a processor; a compartment for housing thesystem; a removable shield; and a spring loaded parachute system;wherein the system includes logic executable on the processor fordetermining from at least information provided by the sensors whether anabnormal flight condition is occurring, whereupon at least a portion ofthe system is configured to separate and eject from the aircraft.

According to some embodiments, an inflatable soft-landing systemcomprises: a body comprising: an emergency flight data recorder system;a fairing housing the recorder system; a parachute; a plurality ofairbags; position signal transmitter; data transmission and positioningsystem; and sensors and controls for controlling the deployment of theparachute and airbags based at least on the altitude, attitude and/orposition of the body.

According to some embodiments, an instantaneous data transmission andpositioning system comprises: an emergency flight data recorder (EFDR);a radio beacon; and a data upload antenna; wherein the module is capableof transmitting information including data recoded on the EFDR to asatellite or cloud server.

According to some embodiments, a tow-type image tracking and capturesystem comprises: detachment device; a body configured for being towedfrom an aircraft, comprising: data connection and transmission cables;camera; nonvolatile memory storage for storing images from the camera;aerodynamic stabilizing device for stabilizing the camera; a detachmentdevice configured for detaching the body from the aircraft.

According to some embodiments, a method comprises: monitoring a flightcondition of an aircraft; if an abnormal flight condition is detected,initiating an ejection of a flight data recorder; and recording video ofthe aircraft from a camera towed by the aircraft. According to someembodiments, an apparatus comprises: a processor including nonvolatilememory; sensors in communication with the processor; logic accessible bythe processor and executable by the processor for performing the method.

According to some embodiments, a camera system comprises: a firstportion, comprising: a video camera including a lens, nonvolatile memoryfor storing images, focusing mechanism and battery, a transmitter andreceiver, and a processor for recording video and/or uploading dataobtained by the video camera; and a second portion connected to thefirst portion, the second portion comprising a stabilizer havingaerodynamic surfaces, wherein the stabilizer is configured for achievingstable flight when the first and second portions are being towed behindan aircraft.

According to some embodiments, an apparatus comprises: an EFDR storingflight data for an aircraft during flight; a TITCS for being towedbehind the aircraft, tacking and capturing the images of the aircraft; aESDP for collecting warning signals and diagnosing if the aircraft is ina state of emergency; a plurality of sensors for collecting flightparameters indicative of a flight state for the aircraft; a pneumaticcylinder containing a piston, the EFDR and the TITCS; a HGEM, coupled tothe piston, for quickly ejecting the EFDR and the TITCS together out ofthe aircraft when the aircraft is diagnosed as being in a state ofemergency; two panels for covering the HGEM and the aircraft fuselagerespectively; a SEP for pulling the EFDR out of the aircraft when thepanel of the HGEM and the panel of the aircraft fuselage open; an airbagsystem; a sleeve adapted for covering the airbag subsystem before theEFDR is ejected from the aircraft; a data link for transmitting theflight parameters and the triggering signal for separating the EFDR fromthe aircraft; a plurality of detachable joints and pluggable connectorsfor connecting the aircraft, the EFDR and the TITCS for datatransmission and separation of the EFDR and TITCS from the aircraft; apower module for providing power to the system; and a surface sealingmechanism (SSM), which is some embodiments uses high pressure gas, araised edge and piston for filling the hole on the aircraft skin afterlunching EFDR.

In some embodiments, the ESDP receives one or more warning signals froman aircraft signal source (for example a flight management computer,independent sensors, etc.) when the aircraft is not operating in anormal flight state. In some embodiments, when the ESDP receives morethan one warning signals, the aircraft is diagnosed as being in anemergency state (for example an imminent crash, or explosion). In someembodiments, the sensors collect crucial parameters of flight state todetermine if the aircraft is in an emergency (for example crash,explosion). In some embodiments, the pneumatic cylinder has an inwardlyraised edge for preventing the piston from being ejected out of theaircraft and sealing the cylinder when HGEM is activated to release theEFDR and TITCS from the aircraft. In some embodiments, the pneumaticcylinder is covered by a panel which is closed by a lock during normalflight, wherein the panel is opened by a compressed torsion spring whenthe lock receives trigger signal. In some embodiments, the HGEM uses agas tank as a high pressure gas source. In some embodiments, the gas ofthe HGEM is released by a valve that controlled by a trigger signalreceived via the data link. In some embodiments, the HGEM transfers thegas pressure through a piston, this piston has a raised edge on thebottom for keeping a certain distance between a piston head and a bottomof the housing. In some embodiments, the spring of the SEP is pre-loadedwhen the panels are closed. In some embodiments, the sleeve isconfigured to open during an inflation of the airbag subsystem, andwherein the opened sleeve separates from the EFDR. In some embodiments,the panel of the aircraft fuselage is locked by an actuator cylinderhaving a retractable plug, wherein the panel is opened by a spring whenthe actuator cylinder receives a trigger signal, thereby causing theplug to retract into the cylinder to allow the panel to open. In someembodiments, a data cable includes two pluggable units configured forbeing disconnected from the EFDR or the TITCS when a threshold tensileforce is reached in the data cable. In some embodiments, one of thedetachable joints provides a removable connection for the toweddetachable cable of the TITCS, wherein the detachable joint includes: adata link connector for connecting a data cable of the TITCS, the datalink connector configured for being detached from the data cable when athreshold tensile force is reached in the data cable; an annulusinstallation base for connecting a hollow rope or tube of the TITCS, andwhen a pilot sends an operation signal, the rope tube is disconnectedfrom the annulus installation base; a fixed installation base formounting the annulus installation base and the data link connector onthe aircraft; an actuator cylinder with a plug for installing a fixedconnector connecting the data cable to the annulus installation base andfor providing a manual separation of the connector from the annulusinstallation base actuated on pilot command; and a pair of connectorsfor connecting the hollow rope or tube to the annulus installation base,wherein the connectors are configured to separate from the tube when athreshold tensile force is reached in the tube. In some embodiments, oneof the detachable joints is a locking module. In some embodiments, thelocking module is provided for connecting the SEP and the housing,wherein when the EFDR lands on the water, the locking module isunlocked, thereby separating the locking module from the housing, thelocking module comprising: a ring on the end of a suspension line of theSEP and a plug in the EFDR for connecting the SEP with the EFDR; and anactuator cylinder in the EFDR for retracting the plug to thereby removeit from the ring and separate it from the SEP. In some embodiments, thepower module can be charged continuously by an aircraft electric powersupply system, during normal flight. In some embodiments, the powermodule provides power for the whole system independently, when the powersupply system on the aircraft fails. In some embodiments, the apparatuscomprises a water sensor for controlling the actuator cylinder when theEFDR lands on water. In some embodiments, the water sensor is mounted ona bottom of the housing which connects with the SEP, so that the sensorcan touch water as soon as the EFDR lands on the water. In someembodiments, the surface sealing mechanism SSM will lock the sabot inthe position to fill the launching hole to protect the laminar airflowin aircraft surface after inadvertent launching.

According to some embodiments, an apparatus for achieving a soft-landingand floatation for an ejected EFDR comprises: a housing for enclosingthe EFDR, an inflation subsystem and a shock-absorbing filler material;inflatable airbags inflated by the inflation subsystems, wherein theairbags, when inflated are configured for contributing to thesoft-landing and floatation for the ejected EFDR housing; a SEP fordecelerating the ejected EFDR during descent through the atmosphere; anda sleeve that encloses the airbag subsystem and housing and isconfigured for being removed when the airbags are inflated.

In some embodiments, the housing defines a compartment for the EFDR, theinflation subsystem and the filler. In some embodiments, the housingincluding the filler material is configured for protecting the EFDR andthe inflation subsystem from impact forces during landing. In someembodiments, a gas tank module of the inflation subsystem storescompressed gas. In some embodiments, the gas tank module is amulti-gas-tank arrangement. In some embodiments, the inflation subsystemincludes valves that are opened to release gas from the gas tank. Insome embodiments, an altitude sensor measures altitude data andtransmits this altitude data to open the valves. In some embodiments,pipes transfer gas to the airbag subsystem. In some embodiments, theairbag subsystem is attached to an outside surface of the housing. Insome embodiments, the airbag material is a high-strength material toprevent puncture and from prevent penetration of water. In someembodiments, the inflated airbag subsystem is configured to providesufficient buoyancy for the housing EFDR and components within forfloatation on or near the surface of water. In some embodiments, theairbags include a coating of shark repellent for protecting the housingand EFDR from being swallowed by sharks. In some embodiments, a SEP isconnected to the housing for decelerating the ejected EFDR during adescent through the atmosphere.

According to some embodiment, a system for receiving and transmittingdata comprises: a TITCS for transmitting tracking images and flight datato an EFDR; a module comprising the EFDR having nonvolatile memory forstoring flight data and a processor, and two transponders fortransmission of flight data, an SOS signal and a positioning signalunder the control of the processor; and the module further comprising apositioning module for providing location coordinates for the module;wherein the system is configured for establishing data links, including:a first data link for wired transmission of the tracking images andflight data from the TITCS to the module; a second data link forwireless transmission of the tracking images from the TITCS to themodule; and a third data link for transmitting and receiving among themodule, a search and rescue aircraft, a ground control center and acloud server.

In some embodiments, the first data link transmits flight data from anaircraft in an emergency state to the EFDR through the TITCS, before theEFDR has separated from the TITCS. In some embodiments, the second datalink transmits flight data from the TITCS to the EFDR, after the EFDRhas separated from the TITCS. In some embodiments, the third data linktransmits flight data through a satellite to the cloud server, andtransmits commands from the search and rescue aircraft and the groundcontrol center to the EFDR. In some embodiments, the third data link isconfigured for instantaneously transmitting data, including acontinuation of transmission from a point of interruption to improvedata transmission efficiency and to prevent data loss between the moduleand the satellite. In some embodiments, one of the transponders is aradio beacon for broadcasting the SOS and positioning signal. In someembodiments, the other transponder is a data uploading antenna fortransmitting flight data to the cloud server and receiving trackingimages from the TITCS via the second data link. In some embodiments, thedata uploading antenna is configured to begin transmitting data when thesearch and rescue aircraft receives the SOS signal from the radio beaconand transmits in response a command signal received by the module. Insome embodiments, the data uploading antenna is controlled by the groundcenter once the third data link between the module and the controlcenter is established. In some embodiments, the positioning module canbe also automatically shut down when it cannot maintain a stable dataconnection with the satellite. In some embodiments, the positioningmodule provides a real-time location coordinate when it can maintain astable data connection with the satellite. The positioning moduleprovides last known location coordinate when it cannot maintain stabledata connection with the satellite.

According to some embodiments, an apparatus for tracking and capturingimages of an aircraft comprises: a towed detachable cable for connectingthe TITCS to an aircraft and receiving data from the aircraft; a datacable connecting the TITCS to an EFDR and transmission of data from theTITCS to the EFDR; a multi-eyes video module comprising a plurality ofcameras for capturing images of the aircraft when the TITCS is beingtowed behind the aircraft; a data processing and transmission module forimage processing and data transmission; and a stabilizing parachute forstabilizing the flight attitude of the TITCS when towed behind theaircraft.

In some embodiments, a towed detachable cable connects the TITCS to theaircraft, towing the TITCS to track the aircraft. In some embodiments,the towed detachable cable includes a hollow rope or tube and a datalink. In some embodiments, the multi-eyes video module captures imagesof the aircraft using one or more of the cameras. In some embodiments, adata processing and transmission module processes the images from themulti-eyes video module and transmits these images to the EFDR.

According to some embodiments, an apparatus for ejecting and separatingthe emergency flight data recorder (EFDR) and the tow-type imagetracking and capturing system (TITCS)/the pull-type picture tracking andpick-up system includes sensors, an emergency situation diagnosisprocessor (ESDP), a high-pressure gas ejection module (HGEM) and aspring-loaded extraction parachute (SEP). The intelligent rapid ejectionand separation system (IRESS) has its own power module. If the aircraftis in an emergency (for example crash, explosion), the HGEM istriggered. Then, the EFDR and the TITCS are ejected together by the HGEMfrom the aircraft rapidly. In an embodiment, the SEP is inflated ordeployed (e.g., the parachute is exposed to air passing over theaircraft) thereby producing a transferring force that pulls the EFDR outof the aircraft together with the HGEM. During the process of ejectingthe EFDR from the aircraft, the EFDR is preferably automaticallyseparated from the TITCS. Alternatively, the TITCS can be separated fromthe aircraft manually or automatically. The EFDR is enclosed by ahousing. After the EFDR lands on water, a locking module between the SEPand the housing is unlocked, thereby separating the SEP from thehousing.

According to some embodiments, an apparatus providing a soft-landing foran emergency flight data recorder (EFDR) includes a housing, an airbagsubsystem and a spring-loaded extraction parachute (SEP). When anaircraft is in a state of emergency (for example, a crash is imminent),the EFDR held by an emergency inflatable soft-landing system (EISS) isejected from the aircraft together with a tow-type image tracking andcapturing system (TITCS) or pull-type picture tracking and pick-upsystem. Then, the EFDR held by the EISS is separated from the TITCS.After that, a SEP decelerates the descent of the EFDR through theatmosphere. An airbag subsystem is inflated. The inflated airbagsubsystem provides a function of soft-landing for the EFDR. In the eventof a water landing the EISS, containing the EFDR, can float.

According to some embodiments, a system and apparatus for transmittingflight data and positioning signals includes three data links andseveral transmitters. Before an emergency flight data recorder (EFDR) isdisconnected with a tow-type image tracking and capturing system(TITCS)/or pull-type picture tracking and pick-up system from anaircraft, flight data is transmitted from the aircraft to the EFDRthrough the TITCS. In an embodiment, images captured by the TITCS aretransmitted to the EFDR and/or stored in the TITCS. The images can betransmitted to the EFDR wirelessly, after the EFDR is disconnected withthe TITCS. After the ejected EFDR lands, a radio beacon mounted thereonbroadcasts SOS and positioning signals. In order to save battery poweror avoid a total loss of battery power due to ineffective or failedattempts at data transmission after a search and rescue ship or aircraftreceives the SOS signal, the EFDR may then start to transmit flight datato a cloud server through a satellite. If a data link between the EFDRand the satellite is established, a ground control center can controlthe data transmission through the satellite.

According to some embodiments, an apparatus for image tracking andcapturing includes a towed detachable cable, a multi-eyes module, a dataprocessing and transmission module (DPTM) and a stabilizing parachute.When an aircraft is in an emergency state the TITCS is ejected from theaircraft and placed in towed behind the aircraft. The TITCS is used totrack the aircraft and capture images of the aircraft. These images areprocessed and stored by the DPTM. In an embodiment, these images aretransmitted to the emergency flight data recorder (EFDR).

In an embodiment, there is provided a system for rapid separation of aflight data recorder from an aircraft, and the system comprises ahousing comprising an internal cavity and an opening; a panel coupled tothe housing and configured to at least partially cover the opening ofthe housing when the panel is in a closed position; a spring that biasesthe panel toward an open position; a locking mechanism configured toretain the panel in the closed position and selectively release thepanel to enable the panel to move toward the open position; a flightdata recorder positioned within the internal cavity of the housing andconfigured to be ejectable from the housing through the opening of thehousing; a pressurized gas source comprising a pressurized gas; anejector slidably positioned internal to the housing; a valve configuredto selectively fluidly couple the pressurized gas source to the ejector,wherein the valve comprises an open position and a closed position,wherein the valve in the closed position separates the pressurized gasfrom the ejector, and wherein the valve in the open position allows thepressurized gas to apply a force on the ejector to rapidly eject theflight data recorder from the housing; an extraction parachute coupledto the flight data recorder, the extraction parachute is a spring-loadedparachute, the spring-loaded parachute comprises a parachute spring thatis held in a compressed configuration by the panel when the panel is inthe closed position, the parachute spring is released from thecompressed configuration when the panel is in the opened position toeject the extraction parachute from the aircraft, the extractionparachute adapted to expand during ejection to pull the flight datarecorder from the aircraft; the flight data recorder adapted to causethe valve to move from the close position to the open position and tocause the locking mechanism to release the panel when the flight datarecorder detects an emergency event; a landing mechanism coupled to theflight data recorder, the landing mechanism adapted to reduce impactforces during landing of the flight data recorder; and a wirelesscommunication systems adapted to transmit data from the flight datarecorder to at least one of a satellite, a second aircraft, and a basestation. In an embodiment, the landing mechanism comprises a descentcontrol parachute coupled to the flight data recorder, the descentcontrol parachute adapted to reduce a descending rate of the flight datarecorder. In an embodiment, the landing mechanism comprises an airbagsystem adapted to be inflated and to prevent the flight data recorderfrom sinking in water or to reduce the impact forces during landing.

In an embodiment, there is a provided a system for rapid separation of aflight data recorder from an aircraft, the system comprising a housingcomprising an internal cavity and an opening; a flight data recorderpositioned within the internal cavity of the housing and configured tobe ejectable from the housing through the opening of the housing; anejection system adapted to eject the flight data recorder when theflight data recorder detects an emergency event; a towing cable having afirst end and a second end, wherein the first end is coupled to thehousing or configured to be coupled to the aircraft, the second end ofthe towing cable coupled to the flight data recorder, the towing cablecomprising a communications cable, the towing cable adapted to tetherthe flight data recorder to the aircraft for a period of time anddecouple from the aircraft; a communication systems adapted to accessdata from the aircraft through the communications cable of the towingcable for storing the data in the flight data recorder; the flight datarecorder adapted to cause the towing cable to decouple at the first orsecond ends based on detecting an impact event; and a landing mechanismcoupled to the flight data recorder, the landing mechanism adapted toreduce impact forces during landing of the flight data recorder. In anembodiment, the landing mechanism comprises a descent control parachutecoupled to the flight data recorder, the descent control parachuteadapted to reduce a descending rate of the flight data recorder. In anembodiment, the landing mechanism comprises an airbag system adapted tobe inflated and to prevent the flight data recorder from sinking inwater or to reduce the impact forces during landing. In an embodiment,the impact event is based on a period of time or is based on detectingwhen the aircraft has impacted land or water.

According to some embodiments, a system for rapid separation of a flightdata recorder from an aircraft comprises: a flight data recorder, saidflight data recorder comprising a wireless communication hardwareconfigured to communicate flight information to a remote device; anemergency detection system comprising a plurality of sensors fordetecting flight parameters and at least one computer processor foranalyzing the flight parameters and determining, based on the analysis,that an emergency event is occurring; a rapid ejection system, saidrapid ejection system comprising a housing for storing the flight datarecorder and a pneumatic system configured to eject the flight datarecorder out of an opening in the housing and through the skin of theaircraft when the emergency detection system determines that theemergency event is occurring; and a soft landing system, said softlanding system being attached to the flight data recorder and configuredto reduce force of impact upon landing and increase buoyancy of theflight data recorder; wherein the flight data recorder is configured tobe separated from the aircraft and configured to receive and transmitflight information and images of the aircraft to the remote deviceimmediately after the emergency event.

In some embodiments, the rapid ejection system further comprises anextraction parachute coupled to the flight data recorder. In someembodiments, the extraction parachute is a spring-loaded parachute. Insome embodiments, the soft landing system comprises one or moreinflatable airbags configured to be positioned about the flight datarecorder when inflated. In some embodiments, the one or more inflatableairbags comprise at least: a first airbag configured to be annularlyshaped when inflated; a second airbag configured to be annularly shapedwhen inflated; and a third airbag configured to be annularly shaped wheninflated, the third airbag positioned between the first and secondairbags. In some embodiments, the soft landing system comprises adescent control parachute coupled to the flight data recorder, thedescent control parachute adapted to reduce a descending rate of theflight data recorder. In some embodiments, the system further comprisesa detachment mechanism configured to detach the descent controlparachute from the flight data recorder; and a sensor configured todetect a water landing, to enable the detachment mechanism to causedetachment of the descent control parachute after a water landing. Insome embodiments, determining that the emergency event is occurringcomprises determining that data received from each of at least twosensors exceeds a threshold level. In some embodiments, the systemfurther comprises a tracking system stored within the housing of therapid ejection system and adapted to be ejected with the flight datarecorder out of the opening in the housing, the tracking devicecomprising at least one camera; and a towing cable having a first endand a second end, wherein the first end is coupled to the housing orconfigured to be coupled to the aircraft, wherein the tracking device iscoupled to the second end of the towing cable, and the at least onecamera of the tracking device is positioned to enable capturing of oneor more images of the aircraft when the tracking device is towed behindthe aircraft in flight by the towing cable. In some embodiments, thesystem further comprises the aircraft, wherein the housing of the rapidejection system is coupled to the aircraft.

According to some embodiments, a system for rapid separation of a flightdata recorder from an aircraft comprises: a housing comprising aninternal cavity and an opening; a flight data recorder positioned withinthe internal cavity of the housing and configured to be ejectable fromthe housing through the opening of the housing; a pressurized gas sourcecomprising a pressurized gas; an ejector slidably positioned internal tothe housing; a valve configured to selectively fluidly couple thepressurized gas source to the ejector, wherein the valve comprises anopen position and a close position, wherein the valve in the closeposition separates the pressurized gas from the ejector, and wherein thevalve in the open position allows the pressurized gas to apply a forceon the ejector to rapidly eject the flight data recorder from thehousing; the flight data recorder adapted to cause the valve to movefrom the close position to the open position when the flight datarecorder detects an emergency event; a landing mechanism coupled to theflight data recorder, the landing mechanism adapted to reduce impactforces during landing of the flight data recorder; and a wirelesscommunication systems adapted to transmit data from the flight datarecorder to at least one of a satellite, a second aircraft, and a basestation.

In some embodiments, the landing mechanism comprises a descent controlparachute coupled to the flight data recorder, the descent controlparachute adapted to reduce a descending rate of the flight datarecorder. In some embodiments, the descent control parachute is aspring-loaded parachute. In some embodiments, the descent controlparachute is also adapted to apply a pulling force to the flight datarecorder while the flight data recorder is being ejected from thehousing. In some embodiments, the system further comprises an extractionparachute separate from the descent control parachute, the extractionparachute adapted to apply a pulling force to the flight data recorderwhile the flight data recorder is being ejected from the housing. Insome embodiments, the system further comprises a detachment mechanismconfigured to detach the descent control parachute from the flight datarecorder; and a sensor configured to detect a water landing, to enablethe detachment mechanism to cause detachment of the descent controlparachute after a water landing. In some embodiments, the landingmechanism comprises an airbag system adapted to be inflated and toprevent the flight data recorder from sinking in water or to reduce theimpact forces during landing. In some embodiments, the airbag systemcomprises one or more inflatable airbags, the one or more inflatableairbags comprising at least: a first annular shaped airbag positioned ata first end of the airbag system; a second annular shaped airbagpositioned at a second end of the airbag system; and a third annularshaped airbag positioned between the first and second annular shapedairbags. In some embodiments, the system further comprises the aircraft,wherein the housing is coupled to the aircraft. In some embodiments, thesystem further comprises a panel coupled to the housing and configuredto at least partially cover the opening of the housing when the panel isin a closed position; a spring that biases the panel toward an openposition; and a locking mechanism configured to retain the panel in theclosed position and selectively release the panel to enable the panel tomove toward the open position.

According to some embodiments, a system for quickly locating andretrieving flight data of an aircraft after an aircraft mid-air mishapcomprises: a flight data recorder, said flight data recorder comprisingwireless communication hardware configured to communicate flightinformation to a remote device; a tracking device comprising at leastone camera and a data communication system; a rapid ejection system,wherein the rapid ejection system forms an opening in the aircraft inthe event of an aircraft emergency and ejects the flight data recorderand the tracking device through the opening of the aircraft; a softlanding system, said soft landing system being attached to the flightdata recorder and configured to reduce force of impact upon landing andincrease buoyancy of the flight data recorder; a tow system, said towsystem comprising a tether and data communication link, wherein thetether physically connects the tracking device to the aircraft after themid-air mishap in a manner such that the tracking device follows theaircraft at a distance to capture images of the aircraft and thesurrounding environment immediately after the mid-air mishap; whereinthe tow system is configured to continue to transmit flight informationfrom the aircraft to the tracking device via the data communication linkfor a period of time after the ejection of the tracking device; andwherein the tracking device transmits to the flight data recorder theflight information received from the aircraft after ejection and theimages captured by the tracking device immediately following the mid-airmishap, and wherein the flight data recorder is configured to in turntransmit said flight information and images to the remote device.

In some embodiments, the data communication system of the flight datarecorder is configured to transmit flight data and videos of theaircraft to the remote device. In some embodiments, the remote devicecomprises at least one of a satellite, a second aircraft, and a basestation. In some embodiments, the rapid ejection system comprises apressurized gas system. In some embodiments, the rapid ejection systemcomprises an extraction parachute coupled to the flight data recorder.In some embodiments, the rapid ejection system comprises: a panel thatcovers the opening prior to ejection; a spring that biases the paneltoward an open position; and a locking mechanism configured to retainthe panel in a position covering the opening and selectively release thepanel to enable the panel to move toward the open position. In someembodiments, the flight data recorder is connected to the trackingdevice via the tow system for a period of time after ejection from theaircraft. In some embodiments, the tow system comprises at least onedetachable connector, said detachable connector can be actuated todisconnect the tracking device from the aircraft in the event the rapidejection system is triggered accidentally. In some embodiments, theopening in the aircraft can be closed in the event the rapid ejectionsystem is triggered accidentally. In some embodiments, the soft landingsystem comprises a plurality of inflatable airbags.

According to some embodiments, a system for quickly locating andretrieving flight data of an aircraft after an aircraft mid-air mishapcomprises: a flight data recorder; a tracking device comprising at leastone camera and a data communication system, wherein the tracking deviceand flight data recorder are configured to be ejected from the aircraftimmediately after the mid-air mishap; a tow system, said tow systemcomprising a tether and data communication link, wherein the tetherphysically connects the tracking device to the aircraft after themid-air mishap in a manner such that the tracking device follows theaircraft at a distance to capture images of the aircraft and thesurrounding environment immediately after the mid-air mishap; whereinthe tow system is configured to continue to transmit flight informationfrom the aircraft to the tracking device via the data communication linkfor a period of time after the ejection of the tracking device; whereinthe tracking device transmits to the flight data recorder the flightinformation received from the aircraft after ejection and the imagescaptured by the tracking device immediately following the mid-airmishap; and a soft landing system, said soft landing system beingattached to the flight data recorder and configured to reduce force ofimpact upon landing and increase buoyancy of the flight data recorder.

In some embodiments, the soft landing system comprises one or moreinflatable airbags. In some embodiments, the soft landing systemcomprises one or more descent control parachutes coupled to the flightdata recorder and adapted to reduce a descending rate of the flight datarecorder. In some embodiments, the system further comprises a rapidejection system comprising a pneumatic piston configured to eject theflight data recorder and tracking device from the aircraft. In someembodiments, the tow system further comprises one or more parachutescoupled to one or more of the flight data recorder and the trackingdevice, the one or more parachutes configured to provide a drag forcethat tends to extend the tether.

According to some embodiments, a system for rapid separation of a flightdata recorder from an aircraft comprises: a housing comprising aninternal cavity and an opening; a flight data recorder positioned withinthe internal cavity of the housing and configured to be ejectable fromthe housing through the opening of the housing; an ejection systemadapted to eject the flight data recorder when the flight data recorderdetects an emergency event; a towing cable having a first end and asecond end, wherein the first end is coupled to the housing orconfigured to be coupled to the aircraft, the second end of the towingcable coupled to the flight data recorder, the towing cable comprising acommunications cable, the towing cable adapted to tether the flight datarecorder to the aircraft for a period of time and decouple from theaircraft; a communication system adapted to access data from theaircraft through the communications cable of the towing cable forstoring the data in the flight data recorder; the flight data recorderadapted to cause the towing cable to decouple at the first or secondends based on detecting an impact event; and a landing mechanism coupledto the flight data recorder, the landing mechanism adapted to reduceimpact forces during landing of the flight data recorder.

In some embodiments, the landing mechanism comprises a descent controlparachute coupled to the flight data recorder, the descent controlparachute adapted to reduce a descending rate of the flight datarecorder. In some embodiments, the landing mechanism comprises an airbagsystem adapted to be inflated and to prevent the flight data recorderfrom sinking in water or to reduce the impact forces during landing. Insome embodiments, the impact event is based on a period of time. In someembodiments, the impact event is based on detecting when the aircrafthas impacted land or water.

For purposes of this summary, certain aspects, advantages, and novelfeatures of the inventions are described herein. It is to be understoodthat not necessarily all such advantages may be achieved in accordancewith any particular embodiment of the inventions. Thus, for example,those skilled in the art will recognize that the inventions may beembodied or carried out in a manner that achieves one advantage or groupof advantages as taught herein without necessarily achieving otheradvantages as may be taught or suggested herein.

BRIEF DESCRIPTION OF THE DRAWINGS

The foregoing and other features, aspects, and advantages of the presentdisclosure are described in detail below with reference to the drawingsof various embodiments, which are intended to illustrate and not tolimit the disclosure. The features of some embodiments of the presentdisclosure, which are believed to be novel, will be more fully disclosedin the following detailed description. The following detaileddescription may best be understood by reference to the accompanyingdrawings wherein the same numbers in different drawings represents thesame parts. All drawings are schematic and are not intended to show anydimension to scale. The drawings comprise the following figures inwhich:

FIG. 1 is a simplified illustration of an aircraft, showing possiblelocations at which an IRESS, EISS, detachable joint, and/or TITCS may bemounted according to some embodiments of the present disclosure;

FIG. 2A is a lateral view in cross-section of a HGEM according to someembodiments of the present disclosure;

FIG. 2B is a sectional view of an embodiment showing the panels of theHGEM and aircraft fuselage;

FIG. 2C is a block diagram showing an embodiment of an intelligent rapidseparation and ejection system;

FIG. 2D is an embodiment of a process flow diagram illustrating anexample process of monitoring the state of an aircraft and performingactions following a determination that the aircraft is experiencingabnormal flight conditions;

FIG. 2E is an embodiment of a process flow diagram illustrating anexample process of monitoring the state of an aircraft for detecting anemergency event;

FIG. 3A is a sectional view of an embodiment showing one component of anapparatus according to the present disclosure;

FIG. 3A′ is an end view of the embodiment of FIG. 3A.

FIG. 3B is a schematic diagram of an embodiment showing one component ofan apparatus according to the present disclosure;

FIG. 3C is a schematic diagram of an embodiment showing SSM structure;

FIGS. 4A-4C illustrate an embodiment of an ejectable flight datarecorder system comprising a sealing plug;

FIG. 5A is a schematic diagram of a sleeve according to some embodimentsof the present disclosure;

FIGS. 5B-5C are schematic diagrams relating to a separation process of aSEP when a EFDR lands on water;

FIGS. 6A-6F illustrate an example ejection sequence for an embodiment ofan ejectable flight data recorder system;

FIGS. 7A-7H illustrate another embodiment of an ejectable flight datarecorder system.

FIG. 8A is a side elevation view in cross-section of an embodiment(without filler material shown) before an airbag subsystem is inflated;

FIG. 8B is a side elevation view in cross-section of the embodiment ofFIG. 7A with filler material shown and before the airbag subsystem isinflated;

FIG. 8C is a side elevation view in cross-section of another embodimentwhen an airbag subsystem is inflated;

FIG. 8D is a side elevation view in cross-section of another embodimentwhen an airbag subsystem is inflated;

FIG. 9A is a simplified diagram showing an embodiment of an EISS aftersoft-landing on the ground;

FIG. 9B is a simplified diagram showing an embodiment of an EISS aftersoft-landing and floating on water;

FIG. 9C is a simplified diagram showing another embodiment of an EISSafter soft-landing on the ground;

FIG. 9D is a simplified diagram showing another embodiment of an EISSafter soft-landing and floating on water;

FIG. 9E is an illustration of multi-gas-tank arrangement for an EISSaccording to another embodiment;

FIG. 10A is a side elevation view in cross-section of an embodimentaccording to the present disclosure;

FIG. 10B is a side elevation view in cross-section of an embodimentaccording to the present disclosure;

FIGS. 10C and 10D are schematic diagrams of an embodiment ofsoft-landing system trigger mechanisms;

FIG. 10E is a simplified diagram showing an embodiment of an ejectedemergency flight data recorder soft-landing on land;

FIG. 10F is a simplified diagram showing an embodiment of an ejectedemergency flight data recorder soft-landing floating on water;

FIG. 10G is an illustration of an embodiment of a multi-gas-tankarrangement;

FIG. 10H shows a schematic of another embodiment of an emergencyinflatable soft-landing and floating system;

FIG. 11A is an illustration of data transmission with the aircraftoperating in a state of emergency, and between a EFDR and a TITCS beforethe EFDR separates from the TITCS according to some embodiments of thepresent disclosure;

FIG. 11B is an illustration of data transmission between the EFDR andthe TITCS, after the EFDR is separated from the TITCS according to someembodiments of the present disclosure;

FIG. 11C is an illustration of an embodiment of an aircraft pulling apicture tracking system having an aerodynamic stabilization device;

FIG. 12A is a schematic illustration of data and signal transmissionamong search and rescue aircraft, the EFDR, a relay satellite, a cloudserver and a ground control center after the EFDR has achieved a waterlanding according to some embodiments of the present disclosure;

FIG. 12B is a schematic illustration of data and signal transmissionamong search and rescue aircraft, the EFDR, the relay satellite, thecloud server and the ground control center after the EFDR lands onground according to some embodiments of the present disclosure;

FIG. 12C is another schematic illustration of data and signaltransmission among various devices according to some embodiments of thepresent disclosure;

FIG. 13A is a side elevation view in cross-section of an embodimentaccording to the present disclosure;

FIG. 13B is a left view of the embodiment of FIG. 13A; and

FIG. 14 is a simplified illustration of the working state of theapparatus in some embodiments of the present disclosure.

FIG. 15 is a block diagram depicting an embodiment of a computerhardware system configured to run software for implementing one or moreembodiments of the systems described herein.

DETAILED DESCRIPTION

Although several embodiments, examples, and illustrations are disclosedbelow, it will be understood by those of ordinary skill in the art thatthe inventions described herein extend beyond the specifically disclosedembodiments, examples, and illustrations and include other uses of theinventions and obvious modifications and equivalents thereof.Embodiments of the inventions are described with reference to theaccompanying figures, wherein like numerals refer to like elementsthroughout. These drawings are considered to be a part of the entiredescription of some embodiments of the inventions. The terminology usedin the description presented herein is not intended to be interpreted inany limited or restrictive manner simply because it is being used inconjunction with a detailed description of certain specific embodimentsof the inventions. In addition, embodiments of the inventions cancomprise several novel features and no single feature is solelyresponsible for its desirable attributes or is essential to practicingthe inventions herein described.

Generally, a flight data recorder, also known as a “black box,” is usedto record data representing the flight state of an aircraft. In theevent of an aircraft mishap, the conventional flight data recorder goesdown with the plane and emits distress signals for 30 days. It typicallystores 30-minutes of cockpit voice dialogue and two-hours of flight databefore the crash. However, when the plane goes down at sea the sonarsignal emitted from the black box only transmits several kilometers,therefore requiring a rather definitive search area, which is oftendifficult in sea crashes. If the black box becomes covered in seabedsludge (or heavy snow, in the case of a mountainside crash), distresssignals are weak and hard to detect, making it difficult to locate thecrash site in a timely manner for rescue. On occasion, an aircraftfitted with a flight data recorder may be lost in a deep ocean trench.It can be very difficult to locate the aircraft and/or determine thecause of the accident in this situation. The reason can be predominantlythat flight data recorders are fixed on the aircraft. As such, they donot separate from the submerged aircraft and float near the surface. Forthis and other reasons, there can be a need for an ejectable emergencyflight data recorder that can separate from an aircraft in flight beforeor during or after an emergency (for example, shortly before, or during,or immediately after a crash or explosion). This will provide greateraccess to flight data during the emergency, which can be very useful toinvestigate the accident cause and consequently prevent or decrease therisk of future catastrophes. There can also be a need for a system thatcan provide more immediate access to flight conditions during anemergency and/or to locate the plane and/or flight data utilizingwireless data decoding, data transmission, and positioning technologies.

In response to these and other needs, the present disclosure describesvarious embodiments of systems and methods for intelligently and rapidlyejecting a flight data recorder and/or other devices from an aircraft inan emergency situation, ensuring a soft and/or survivable landing for anejected device, capturing external images and/or video of an aircraft inan emergency situation at a distance away from the aircraft, continuingto track or log flight data of an aircraft in an emergency situationafter ejection of an ejectable flight data recorder, transmitting loggeddata to a remote system prior to an ejected device being recovered,and/or transmitting signals that help in the efficient recovery of anejected device.

In some embodiments, an ejectable flight data recorder system isconfigured to analyze one or more signals received from sensors, flightcomputers, manual inputs, other data and/or inputs, and/or the like todetermine whether an aircraft is in an emergency situation that islikely to cause loss and/or crashing of the aircraft. In someembodiments, the system comprises an ejectable flight data recorder thatstores a copy of logged flight data and is configured to be rapidlyejected from the aircraft upon a determination (for example, goingbelow, reaching, and/or going above certain threshold levels orcombination of certain threshold levels) that the aircraft is in anemergency situation. This rapid ejection may occur in various mannersusing one or more methods of ejection. In some embodiments, it isdesirable for the rapid ejection to occur as a combination of at leasttwo different ejection mechanisms. For example, a spring-loadedparachute (or other type of parachute or pilot parachute) may beattached to a component of the ejectable flight data recorder system andexpelled from the aircraft, thus helping to pull the attached componentof the flight data recorder system out of the aircraft. As anotherexample, a piston or other ejector may be positioned behind or adjacentto the flight data recorder or a component of the flight data recordersystem and configured to push the component out of the aircraft, such asunder the pressure of a high-pressure gas, hydraulic fluid, and/or thelike. Although in some embodiments only a single method of ejection isutilized, it can be desirable to use more than one, in this case onepulling method and one pushing method, to ensure a fast and fullejection of the ejectable components. In many emergency situations, theavailable time to safely eject a flight data recorder is minimal (forexample, 1 second, 2 seconds, 3 seconds, 4 seconds, 5 seconds, 6seconds, 7 seconds, 8 seconds, 9 seconds, 10 seconds, 20 seconds, 30seconds, 40 seconds, 50 seconds, 60 seconds, 2 minutes, 3 minutes, 5minutes; 10 minutes; 15 minutes, 20 minutes or the like), such as whenan aircraft is in the process of experiencing an explosion. Accordingly,it can be critical in some situations to ensure a fast ejection and/orseparation of the ejectable flight data recorder from the aircraft.Using a system that comprises at least two different methods of ejectionor separation can help to increase the speed of the ejection orseparation and/or provide redundancy to ensure a full ejection orseparation.

One problem encountered in designing a system for rapid ejection of aflight data recorder (and/or other components) from an aircraft is thatthe skin of the aircraft may need to be breached in some embodiments. Itcan be desirable, however, to have no or minimal effect on theaerodynamic properties of the aircraft skin prior to ejection, and insome cases also after ejection. Since an ejectable flight data recordersystem may only be intended to be used in an emergency situation, suchas a situation when the aircraft is going to be lost and will never beput into service again, it may not matter in some situations that a holeis created in the skin of the aircraft when the data recorder isejected. However, there is a possibility in some cases of an accidentalejection or potentially an ejection after which the emergency situationceases to exist and the aircraft recovers to normal flight. In thosecases, it can be desirable to ensure the ejection of the data recorderhas no or minimal effect on the flight capability of the aircraft afterejection. In some embodiments, this concern is addressed bystrategically positioning the flight data recorder system in a lowstress location and/or a location where disrupting the smooth surface ofthe aircraft skin would have minimal effect on aerodynamic properties.For example, an ejectable flight data recorder may be positioned in thetail of the aircraft, or in other locations. Further, in someembodiments, it can be desirable to limit the size of opening needed toeject the flight data recorder to be relatively small, and thus to haveless effect on aerodynamic properties of the aircraft. For example, insome embodiments, the ejectable flight data recorder system isconfigured to fit within a relatively small diameter cylindrical tubethat requires only a relatively small circular opening in the aircraftskin to be created for ejection of the data recorder.

In some embodiments, an ejectable flight data recorder device isconfigured to break through the skin of the aircraft upon ejection. Forexample, the skin of the aircraft may comprise a region having one ormore reduced strength areas or stress risers that enable a predeterminedportion or section of the skin to break out when the flight datarecorder device is ejected therethrough. In some embodiments, instead ofbreaking through the aircraft skin, the system is designed to have ahatch, panel, and/or the like that is selectively releasable from theaircraft skin and/or selectively moveable with respect to the aircraftskin. In some embodiments, such a panel may comprise one or more lockingdevices and or sealing mechanisms that retain the panel and/or seal inplace during normal flight, but that rapidly release the panel uponrequiring an ejection. In some embodiments, the panel is spring-loadedto cause the panel to be rapidly separated from and/or swing away froman opening through which the ejected flight data recorder will pass.Such a spring-loaded system may enable the panel to more quickly moveout of the way of the flight data recorder when the flight data recorderis being rapidly ejected. In some embodiments, the panel is configuredto re-close or move back into its original position after ejection, thusminimizing or eliminating any effect the ejection opening may have hadon the aircraft's aerodynamic properties.

In some embodiments, the ejectable flight data recorder system isconfigured to be adjacent or positioned near or coupled to an interiorsurface of the skin of the aircraft, and the skin of the aircraft can bethe only surface or structure that needs to be breached by the ejectablecomponent or components when it is or they are ejected. For example, anejectable flight data recorder may be positioned within a housing havingan open end, with that open end being positioned adjacent an interiorsurface of the aircraft skin. However, in other embodiments, it may bedesirable to have an additional panel or surface through which theejectable components need to pass before passing through the aircraftskin. For example, an ejectable flight data recorder may be positionedwithin a housing having an opening at one end, and that opening may becovered by a panel, cover, shield, and/or the like. The housing andcover may then be positioned adjacent an interior surface of theaircraft skin, and upon ejection, both the aircraft skin and the endcover of the housing will need to be breached. Either or both surfacesmay be breached by breaking through them, a removable panel beingremoved, a hingedly attached panel moving or rotating out of the way,and/or the like. One reason it may be desirable to have two surfacesthrough which the ejectable components need to pass is that an ejectableflight data recorder system may be manufactured more efficiently as anindividual module or system that is self-contained and can then bemounted to the aircraft. For example, particularly in an embodimentwhere a spring-loaded parachute is located within the housing of theflight data recorder system, it may be complicated to install such asystem in an aircraft if a panel, shield, and/or the like is not used tokeep that spring-loaded parachute compressed before ejection and/orbefore installation into the aircraft. Further, it may be desirable tokeep the ejectable flight data recorder, spring-loaded parachute, and/orother components contained within a housing, and not able to contact theinterior surface of the aircraft skin during normal flight, sincesomething that contacts the interior surface of the aircraft skin mayeventually damage or cause wear to the aircraft skin due to normalflight turbulence, vibrations, accelerations, and/or the like.

In some embodiments, in addition to the desirability of rapid ejectionof a flight data recorder from an aircraft in an emergency situation, itcan be desirable to continue to track or log data relating to theaircraft after the flight data recorder has been ejected. For example,in some embodiments, the aircraft may comprise a wireless transmitterthat is configured to wirelessly transmit (or a transmitter for wiredcommunications to transmit) additional logged data to the ejected flightdata recorder. The flight data recorder may comprise a wireless receiveror other receiver that receives this transmitted data while the ejectedflight data recorder is descending to the surface. In some embodiments,this wireless transmitter is contained within or about the aircraft andis not ejected from the aircraft. In some embodiments, however, thiswireless transmitter (or another wireless transmitter) may be includedin a portion of the ejectable flight data recorder system that is alsoejected from the aircraft along with the flight data recorder thatdescends to the surface. For example, some embodiments of ejectableflight data recorder systems as disclosed herein comprise a trackingdevice that is ejected from the aircraft and remains coupled to theaircraft, for at least a portion of time, by a tow cable that tows thetracking device behind the aircraft. In some embodiments, the tow cablecomprises a data cable portion or line that is able to transmit data toand/or from the aircraft to the tracking device while the trackingdevice is being towed behind the aircraft. In an embodiment, the datacable portion or line can be configured to transmit data from thetracking device to the aircraft, wherein the aircraft is configured totransmit via other communication systems the data to a system that isexternal to the aircraft, such as a satellite or antenna or basestation. The tracking device can then transmit that data wirelessly tothe ejected flight data recorder. One benefit of transmitting the datafrom this towed tracking device instead of directly from the aircraft isthat the aircraft, since it is in an emergency situation, may beincapable of transmitting the data. Another benefit is that the trackingdevice may be able to more efficiently and/or more effectivelywirelessly transmit the data, since the tracking device is being towedbehind the aircraft, away from potential interference sources. Further,in some embodiments, the towed cable may comprise at least a portion ofthe transmission antenna, enabling a relatively long and/or largeantenna to be used.

In some embodiments, it may additionally be desirable to enablecapturing of images and/or videos of the aircraft and/or the surroundingenvironment while the aircraft is experiencing the emergency situation.Accordingly, some embodiments may comprise a towed tracking device(similar to as mentioned above), and that towed tracking device maycomprise one or more cameras or other detectors, such as thermal imagingsystems, x-ray imaging systems, and/or the like which enable externalcapturing of data about the aircraft and/or the surrounding environment.This data captured externally by the tracking device may then betransmitted wirelessly to the ejected flight data recorder as the flightdata recorder descends to the surface. Although many embodimentsdisclosed herein describe the towed tracking device as wirelesslytransmitting data to the ejected flight data recorder, in someembodiments, the ejected flight data recorder and towed tracking devicemay, for at least a period of time, be coupled via the same or adifferent tow cable that enables wired communication between thetracking device and the ejected flight data recorder. The flight datarecorder may then, at an appropriate time, separate from the towedtracking device and begin its descent to the surface.

In some embodiments disclosed herein, an ejected flight data recordercomprises one or more features that enable a soft and/or survivablelanding on water and/or ground. For example, a flight data recorder maycomprise one or more parachutes configured to stabilize and/or slow thedescent of the ejected device. At least one parachute may be configuredas a pilot parachute that helps to pull the flight data recorder out ofthe aircraft upon ejection. That pilot parachute may also be configuredto help control the descent of the flight data recorder after ejection.One or more additional parachutes may also be configured to help controlthe descent, and those parachutes may, for example, be configured todeploy after the flight data recorder has been ejected from theaircraft, instead of before ejection like the pilot parachute. Further,as described below, some embodiments may comprise one or more inflatableairbag systems that perform one or more functions, such as, for example,generating a larger surface area to slow the descent of the device,absorbing impact upon contact with the surface, and/or helping thedevice to remain afloat in the case of a water landing. Further, in someembodiments, the ejectable flight data recorder device may comprise oneor more types of shock absorbing fillings, coverings, structures, and/orthe like that help to absorb shock when the device impacts the surface.Such fillings, coverings, structures, and/or the like may also help toabsorb any shock created by the rapid ejection of the device from theaircraft.

In some embodiments, an ejectable flight data recorder system asdisclosed herein comprises one or more features that enable transmissionof logged data to a remote device prior to the ejected flight datarecorder being recovered. For example, the ejected flight data recorderdevice may comprise one or more transmitters configured to transmitlogged data to a satellite, other aircraft, one or more ground stations,and/or the like while the flight data recorder is descending and/orafter the flight data recorder has landed. Further, in some embodiments,the ejected flight data recorder device may comprise one or moregeolocation sensors, such as GPS, GLONASS, inertia-based systems, and/orthe like, which enable the ejected flight data recorder to determine orestimate its present and/or future location (e.g., an estimated landinglocation and/or flight path while the device is still descending). Thesystem can be configured to transmit to this determined or estimateddata to similar remote devices, such as satellites, other aircraft,ground stations, and/or the like, to enable more efficient recovery ofthe ejected flight data recorder. In some embodiments, the system can beconfigured to operate for an extended period of time by, for example,detecting when its transmissions are being received or not received, andautomatically disabling transmissions and/or reducing a frequency oftransmissions when the device detects that its transmissions are notbeing received or are not consistently or reliably being received by aremote system. For example, the ejected flight data recorder device maycomprise a receiver that wirelessly receives confirmation data from asatellite, other aircraft, ground station, and/or the like. Thisreceived confirmation data may help the flight data recorder todetermine whether and at what frequency to transmit additional dataand/or to retransmit data.

Various embodiments will be described below with reference to theaccompanying figures. Some of the embodiments include one or morefeatures and/or benefits, such as, for example, rapid ejection,continuing to log data and/or images after ejection, enabling a softand/or survivable landing, transmitting logged data and/or positioninformation to a remote device, and/or the like. For simplicity indescribing these embodiments, some embodiments are described withreference to and/or the drawings and description focus on only one ofthese features or advantages, or a subset of these features oradvantages. The various features of the individual embodiments disclosedherein may be combined, however, with features of other embodimentsdisclosed herein, and such resulting embodiments are considered part ofthe disclosure.

FIG. 1 depicts an aircraft 10 illustrated in simplified side elevationand is shown to illustrate some possible locations 110 where variousembodiments of ejectable systems as disclosed herein can be positionedin an aircraft 10. A possible first location is generally at the rearpart of the aircraft fuselage 12 and a possible second location is atthe backward portion of the tip of the vertical tail. FIG. 1 also showsthe possible location 130 where sensors can be implemented in anaircraft 10. The location 130 is generally at the forward portion of thetip of the vertical tail. Although FIG. 1 illustrates some desirablelocations, other locations may be utilized. One factor in determining adesirable location may be choosing a location where ejected componentsare not likely to impact another portion of the aircraft. Another factorin determining a desirable location may be choosing a location wherebreaching the skin of the aircraft will have little or no effect on theaerodynamic properties of the aircraft, such as laminar flow of airacross the aircraft skin.

Intelligent Rapid Ejection and Separation System (IRESS)

FIG. 2A, shows lateral views of an embodiment of a high-pressure gasejection module (HGEM) 21 for ejecting an emergency flight data recorder(EFDR) 16 and a tow-type image tracking and capturing system (TITCS) 300from the aircraft. Warning signals from a signal source 210 of theaircraft (for example a flight management computer) can be sent to anemergency situation diagnosis processor (ESDP) 212, when the aircraft isnot in a normal flight state. When the ESDP 212 receives one or morecertain types or sequences of warning signals, the aircraft can bediagnosed as being in a state of emergency (hereinafter an “emergencystate,” for example, a crash is imminent, an explosion has, or is aboutto take place, and/or the like.). The HGEM 21 can be activated by theESDP 212. Alternatively, a pilot may send operational signals directlyfrom the cockpit 17, independent of the signals received and diagnosisby the ESDP, if the pilot decides it necessary to activate the HGEM 21or to separate the TITCS. If flight parameters received from sensors 14reach critical values, the HGEM 21 can additionally be activated.

In emergency situations the aircraft can sometimes regain a stable andsafe flight state. In this case and after release of the towed cable 301has taken place, pilot can separate the towed cable 301 from theaircraft manually, such as to avoid any effect of the towed system onthe aircraft. In an embodiment, the towed cable 301 can be released,manually or otherwise, at either end of the towed cable 301 or the towedcable 301 can separate at any point between either end of the towedcable 301. In an embodiment, the towed cable 301 can be attached orcoupled to a tracking system, such as TITCS, or the towed cable 301 canbe attached to a flight data recorder system, such as the EFDR. In anembodiment, the towed cable 301 can be attached or coupled to a housing240 or to any part of the aircraft.

If the aircraft is in an emergency state, the ESDP 212 or the sensors 14can send a signal through the signal cable 211 to open a high pressuregas valve or other valve 232. In opening the valve 232, a high-pressuregas tank 233 can be configured release compressed gas through pipes 230and 231 into a compartment 241, for pushing a piston or other ejector242 forward (left to right in FIG. 2A). The compartment 241 can be anair cavity, which can comprise a pneumatic cylinder or housing 240 and apiston 242. When the piston is pushed forward the TITCS 300 and the EFDR16 can be both ejected from the aircraft 10. At the same time, a springloaded extraction parachute (SEP) 403 ejects out of the cylinder by itsown spring 454 and can be inflated by air to pull the EFDR 16 out of theaircraft 10 rapidly (such as in less than 0.5 seconds). Accordingly, thepushing action of the piston 242 and the pulling action of the parachute403 can work together to effect a rapid ejection of the devices from theaircraft, and/or to provide redundancy in case one of the ejectionmechanisms fails. Further, although this embodiment uses a pneumaticpiston and a spring-loaded parachute for ejection, other embodiments mayuse additional, fewer, and/or different ejection mechanisms in anycombination. Some examples are a hydraulic piston, a piston that movesin response to an explosion or combustion, springs, gravity, suctionfrom a low pressure area generated by air flowing across the aircraft,and/or the like.

With further reference to FIG. 2A, an inwardly raised edge 250 (e.g.,lip, stop surface, protrusion, and/or the like) can be provided on thetop of the pneumatic cylinder 240 (e.g., adjacent or near an opening 251of the cylinder 240). This raised edge 250 prevents the piston 242 frombeing ejected out of the aircraft 10 (or through or beyond the opening251). The EFDR 16 can be connected with the TITCS 300 by a data cable281. The aircraft 10 can be connected with the TITCS 300 by a towedcable 301. Flight data can be transmitted from the aircraft 10 to theEFDR 16 through towed cable 301 and data cable 281. The towed cable 301goes inside the pneumatic cylinder 240 through a concave hole 246 on thetop of the pneumatic cylinder 240 (although the cable 301 may enter thecylinder 240 in other ways in other embodiments). During normal flight,the opening 251 of the pneumatic cylinder or housing 240 can be coveredat least partially by a panel 245. A lock 243 can be located outside thepneumatic cylinder 240 and configured to keep the panel 245 in a closedposition or configuration (e.g., covering the opening 251 and/orremaining in contact with an end surface of the housing or cylinder240). When the ejection system can be activated, the lock 243 receivessignal from the ESDP 212 and operates to unlock the panel 245, enablingmovement of the panel 245 from the closed position or configuration toan open position or configuration (e.g., not covering the opening 251and/or not in contact with an end surface of the housing or cylinder240). A torsion spring 244 can be located on the panel 245 to bias thedoor 245 in the open position, thus providing a force for opening thepanel 245 quickly or rapidly when the lock 243 can be released. Othermechanisms of biasing the panel 245 to the open position and/or forcingthe panel 245 to move toward the open position may be used, such as acompression spring, a high pressure gas, an explosive charge, anelectromagnetic force, and/or the like. A locking module 220 can be usedto connect the SEP 403 and the housing 401. When the EFDR 16 lands onthe water or on the ground, the locking module 220 can be desirablyunlocked, thereby the SEP 403 can be separated or allowed to separatefrom the housing 401. Additional details of such an embodiment are givenbelow with reference to FIGS. 5B and 5C.

The embodiment of FIG. 2A further comprises an independent power module15, which can provide electrical power to power instruments, processors,sensors and actuators of the IRESS in the event aircraft power fails.During normal flight, the power module 15 can be charged continuously byan aircraft electric power supply system.

In the embodiment of FIG. 2A, parachute 403 is a spring-loaded parachuteand/or comprises a spring 454 that is in a compressed state prior toactivation of the ejection sequence, but that helps to eject theparachute 403 from the aircraft and/or to inflate the parachute 403 whenthe panel 245 is opened. In some embodiments, panel 245 holds theparachute 403 and spring 454 in the compressed configuration. In someembodiments, another feature of the system holds the parachute 403 andspring 454 in the compressed configuration.

FIG. 2B, shows a cross section of an embodiment similar to theembodiment of FIG. 2A, but also including a selectively openable panel260 located on the aircraft fuselage or skin. When the aircraft is in anemergency, the ESDP 212 can send a signal to activate an actuatorcylinder 263 through a signal cable 211. This signal causes a plug 264(operated by a pneumatic cylinder 263, or other type of lock actuator)to be removed from a plug hole 262. The panel 260, which can be mountedon the aircraft fuselage, or other portion of the aircraft, connects toan internal torsion spring 261. When the panel 260 is closed, theinternal torsion spring 261 can be tightened. When the plug 264 isremoved from the hole 262, which movement moves the plug 264 back intothe actuator cylinder 263, the fuselage panel 260 can automatically opendue to the mechanical energy released by the internal torsion spring261. As with the panel 245 described above, various mechanisms offorcing or biasing the panel 260 to the open position may be used inaddition to or in lieu of a torsion spring. Further, since the panel 260is exposed to the outer surface of the aircraft skin, it may bedesirable in some embodiments, to have a smooth outer surface with no orminimal protrusions. Accordingly, although FIG. 2B illustrates thetorsion spring and hinge 261 as protruding somewhat from the outersurface of the aircraft skin (in the rightward direction as oriented inFIG. 2B), it may be desirable to utilize a hinge and/or torsion springconfiguration that is hidden below or behind the outer surface, thus notaffecting the aerodynamic properties of the aircraft during normalflight.

It can also be desirable in some embodiments to minimize the size of theopening through which the ejectable flight data recorder will pass inthe aircraft fuselage 12, and/or in the housing 240, to help minimizeany effect on the aerodynamic properties of the aircraft after thepanels 260 and/or 245 have opened. For example, the panels 245, 260 mayeach be configured to cover an opening in the housing 240 and/orfuselage 12 that comprises a diameter no larger than 40 cm. In otherembodiments, a desirable opening size may be, for example,approximately, exactly, or no greater than 5, 6, 7, 8, 9, 10, 11, 12,13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30,31, 32, 33, 34, 35, 36, 37, 38, 39, 50, 60, 70, 80, 90 cm. In someembodiments, the components intended to be ejected out of the housing240 may be designed to be relatively long and slender in design, thusenabling the opening through which they pass to be smaller. For example,one or more of the parachute 403 data recorder 16, housing 401, and/ortowed tracking device 300 may be cylindrical in shape and/or may bepositioned within a cylindrically shaped housing that is configured topass through the openings covered by the panels 245, 260.

In some embodiments, the size of the opening is at least partiallydependent on the location of the opening in the aircraft. For example,if the opening is positioned at a top of the vertical stabilizer of theaircraft (e.g., upper position 110 of FIG. 1), the opening may need tobe smaller than if the opening were positioned at lower position 110 ofFIG. 1, where the aircraft fuselage is wider. As another example, somelocations may allow for a larger opening before the opening has agreater than negligible effect on the aircraft's aerodynamic propertiesand/or stress levels in the aircraft fuselage and/or skin. In someembodiments, the size of the opening may be at least partially dependenton a desired size of the extraction or pilot parachute that isconfigured to help pull the flight data recorder and/or other componentsout of the aircraft. It should be noted, however, that in someembodiments the compressed or pre-deployment size of the parachute canbe configured to fit within a variety of sizes of housings and/or to fitthrough a variety of sizes of openings. In some embodiments, an expandedsize of the pilot or extraction parachute is configured to enableproduction of a sufficient force (for example, a tension force in anattached cable) to pull the flight data recorder and/or other componentsout of the aircraft. In some embodiments, the parachute is configured toproduce a sufficient force to pull the flight data recorder and/or othercomponents out of the aircraft when the aircraft is flying at a speedless than a normal flight speed (for example, a typical cruising speedfor a particular aircraft). This may be desirable, for example, becausein an emergency situation, the aircraft may not always be flying at anormal flight speed.

It can also be desirable in some embodiments to have at least one of thepanels 245, 260 be configured to re-close after ejection of the flightdata recorder. By reclosing the panel, any temporary effect on theaerodynamic properties of the aircraft fuselage will be minimized oreliminated after the panel or panels have re-closed. In someembodiments, the reclosing is automatic, meaning no manual input or userintervention, such as by the pilot, is required. For example, the panelsmay be positioned in a way that gravity and/or forces from air passingby the plane as it travels in a forward direction cause the panel orpanels to be forced closed after the flight data recorder has beenejected. As another example, the mechanism used to open the panel, suchas torsion spring 261, 244, may be a reversible mechanism that reversesand biases the panels closed after the flight data recorder has beenejected. As another example, the panels may be connected to an actuatorcomprising a motor, ball screw, lead screw, pneumatic cylinder,hydraulic cylinder, and/or the like that actively opens and/or closesthe panel. For example, one or more pneumatic cylinders may be used toopen and/or close the panels 245, 260, in addition to or in lieu oftorsion springs 244, 261. These pneumatic cylinders may operate usingthe same pressurized gas source as piston 242 or a different pressurizedgas source. In some embodiments, the pneumatic cylinder or cylinders canbe configured to rapidly open the panel or panels, and after theejectable components have been ejected, the cylinders may reverse strokeand close the panel or panels. In some embodiments, the actuator actsautomatically to reclose the panel after opening. However, in someembodiments, the actuator used to reclose the panel may be manuallyoperated, such as by a switch or button the pilot can control. This maybe desirable in some embodiments, since if a real emergency is occurringit may not matter that the panel is re-closed, but in the case of aninadvertent ejection, it may be desirable to re-close the panel. In thatcase, the pilot could flip a switch or operate another input device tocause closing of the one or more panels.

FIG. 2C illustrates a block diagram of another embodiment of an IRESS.As shown in FIG. 2C, this embodiment comprises a plurality of sensors 14(for example, airspeed sensors, acceleration sensors, altitude sensors,and/or the like), a data analyzing and processing system 212 (alsoreferred to as an emergency situation diagnostic processor), compartment2040, housing 240, removable shield 245, pull-type picture pick-upsystem 300, soft-landing system 400, emergency flight data recorder 16,and spring-loaded parachute system 403 (which may include a spring 454,similar to as shown in FIGS. 2A and 2B). This embodiment can operateand/or function similarly to other embodiments disclosed herein. Forexample, the sensors 14 may be configured to collect and transmit flightparameters and/or other data to the data analyzing and processing system212, for determining whether an emergency event is occurring that mayrequire ejecting the emergency flight data recorder 16 and othercomponents. The sensors 14 may be located at appropriate locations on orin the aircraft.

The data analyzing and processing system 212 can be used for dataanalysis, self-judgment, automatic activation of ejection, and/or thelike. In some embodiments, with the method of fuzzy mathematics, thedata analyzing and processing system obtains the real-time flight pathand overloads. Parameters input to the decision-making process mayinclude, for example, the flight attitude, velocity, course of theaircraft (and/or deviating from intended route), rate of climb, rate ofdescent, acceleration, fuel oil consumption, landing gear retraction,Greenwich Time, working status of systems, working parameters ofengines, noise level, vibration level and/or patterns, and/or the like.The data analysis and processing system 212 will make judgments onwhether the plane is in abnormal flying situations (such as an emergencysituation that is likely to result in loss of the aircraft). Upon thesystem identifying abnormal flight status intelligently, the system canbe configured to send an “OPEN” command or similar to the removableshield 245 (and/or other shields or panels, such as panels 245 260illustrated in FIG. 2B). Later, the data analyzing and processing system212 can send another “START” command or similar to start the pull-typepicture pick-up (image capture) system 300 through the connecting cableafter it is ejected from the aircraft. In some embodiments, only oneactivation command needs to be sent, which causes activation of theejection, separation, and image capturing processes. However, it may bedesirable in some embodiments to use more than one sequential command toactivate particular portions of the ejection, separation, and/or imagecapturing processes.

The removable shield 245 can be configured to cover an opening in thehousing 240, which accommodates the parachute system 403, the emergencyflight data recorder 16, soft-landing system 400, and the pull-typepicture pick-up system 300. Once the “OPEN” command is received fromdata analyzing and processing system 212, the removable shield 245 canbe open rapidly to allow all the systems inside the housing 240 to beejected quickly.

The spring-loaded parachute system 403 can be used to help eject theflight data recorder 16, inflatable soft-landing system 400 (which maybe at least partially disposed about the flight data recorder 16,similarly to the airbag subsystems 404 described below), and thepull-type image tracking/transmission system 300. After ejection, theparachute 403 can also help to separate the flight data recorder 16 andsoft-landing system 400 from the towed tracking system 300.

The processing system 212 comprises a processor, nonvolatile memory, apower source (on-board battery and/or by tapping into an available powersource on the aircraft), and a circuit for transmitting the data fromthe sensors to the processor. The processor accesses onboard software(programmable) and/or hardware logic for making autonomous decisions onthe aircraft's state based on data received from the sensors andpossibly other sources, e.g., a wired or wireless communication linkwith the aircraft cockpit or controls. Additionally, the processor mayinclude sub-systems for processing raw data received from the sensors,e.g., an integrator which can inform the processor about a rate of climbor descent, or differentiator to inform the processor about a rate ofchange in air pressure. The processing system can be intelligent,meaning that based on data received from, e.g., the sensors, an abnormalflight status can be detected dynamically and/or automatically inreal-time, and the ejection device will be triggered automaticallywithout human intervention needed. Additional details of electronichardware that may be used with the data analyzing and processing systemare described below with reference to FIG. 15.

FIG. 2D illustrates an embodiment of a process flow diagram showing oneexample implementation of the system. At block 2101, the process startsand the system can be initiated, which may be at, for example, somepoint after take-off. At block 2103 the system begins collecting datafrom the sensors and, at block 2105, making a determination about theflying conditions. This assessment of the flying state of the aircraftmay continue indefinitely until after the plane has landed and/or untilthe system is otherwise disabled. For example, the system may beremotely turned on/off from the cockpit, or automatically turned on andoff, such as when the aircraft is near the ground under normalconditions (for example, right after take-off and during finalapproach).

When an abnormal flight condition is detected, the process flow proceedsto block 2107, and the system may begin to transfer data from the flightrecorder (e.g., the permanently-installed flight recorder) to the EFDR(e.g., ejectable recorder 16). In some embodiments, this block isoptional, because data may regularly be stored in the EFDR during normaloperating conditions, meaning most or all of the data stored on thepermanent flight recorder is already also stored on the EFDR. If after acertain time period the system confirms an abnormal flight data and whenthe data transfer is complete, the process flow proceeds to block 2109and the system initiates ejection of the landing system. The system mayor may not make a second determination of whether to initiate ejectionafter data is downloaded from the block box. If the system determinesnot to eject the landing system, the process flow proceeds back to block2103. Although this embodiment illustrates a multistage decision processthat comprises an initial detection of an abnormal flight condition(e.g., block 2105) and then a secondary determination as to whether theejectable system should be ejected (e.g., block 2109), such as based onconfirmation of the abnormal flight condition, the abnormal flightcondition becoming worse, and/or the like, some embodiments may comprisemore or fewer stages in the process. For example, in some embodiments,the system may make a single determination that an abnormal or emergencyevent is occurring and immediately activate the ejection process. Thismay be desirable in some embodiments, because in certain situations,such as a bomb exploding on an aircraft, the ejectable data recorder mayneed to be ejected very quickly, and even additional millisecondsrequired in a multistage decision process may delay the ejection morethan desired.

After the landing system has separated at block 2111, the processingsystem initiates and begins video capture and storage at block 2113.This information can be transmitted to a relay satellite at block 2115.During the video capture the processing system can continue to monitorthe state of flight based on sensor data. At block 2117, if the aircraftstabilizes itself (or a power shutoff command is received) theprocessing system can detach the towed camera from the rear of theaircraft (at block 2119), to reduce or eliminate any undesirableaerodynamic effect of the towed camera on the flight of the aircraft.The process completes at block 2121.

FIG. 2E illustrates an embodiment of a process flow diagram showing anexample process for detecting whether an emergency event is occurring,and thus whether an ejectable flight data recorder system ejectionprocess should be initiated. The process illustrated in FIG. 2E may beperformed by, for example, the data analyzing and processing system 212illustrated in FIG. 2C, the emergency situation diagnostic processor 212illustrated in FIG. 2A, and/or various other systems disclosed herein.The process flow begins at block 2201 and proceeds to block 2203, wherethe system monitors any inputs. For example, the system may monitor datareceived from one or more sensors 2205, one or more manual triggers2207, and/or one or more external analysis systems 2209. For example,the sensors 2205 may comprise altitude sensors, acceleration sensors,and/or various other types of sensors, similar to as described abovewith reference to sensors 14. The one or more manual triggers 2207 may,for example, comprise a manual trigger located in the cockpit thatenables the pilot to indicate to the system that an emergency event isoccurring and that the ejectable flight data recorder system shouldinitiate an ejection process. The one or more external analysis systems2209 may comprise, for example, a separate system located on or in theaircraft that detects when an emergency event is occurring, a systemexternal to the aircraft, such as located in a ground control stationthat communicates with the aircraft through, for example, satellites,and/or the like. In some embodiments, the system can be configured toanalyze data from the sensors 2205 to make its own determination as towhether an ejection should be initiated. In some embodiments, the systemcan also be configured to automatically initiate ejection, withoutmaking its own determination, in response to a signal received from amanual trigger 2207 and/or external analysis system 2209.

At block 2211, the process flow varies depending on whether an ejectionrequest has been received. For example, an ejection request may bereceived from the manual trigger 2207 and/or external analysis system2209. If an ejection request has been received, the process flowproceeds to block 2213 and an ejection process can be initiated. Theejection process may proceed in some embodiments as illustrated in FIG.2D beginning at block 2109. The ejection process is not limited to theprocess illustrated in FIG. 2D, however, and various other ejectionprocesses as disclosed herein may be utilized.

If an ejection request has not been received at block 2211, the processflow proceeds to block 2215, and the system can be configured to analyzedata from the sensors 2205. For example, the system may be configured tocompare data from one or more individual sensors to stored referencedata that indicates a maximum or minimum threshold level of eachsensor's data, a range of acceptable or normal data for each individualsensor that indicates the sensor is operating in a normal flightcondition, and/or the like. In some embodiments, the system may alsoanalyze data from two or more sensors in combination. For example, acertain individual sensor having data outside of a predetermined rangemay not in and of itself be indicative of an emergency event occurring,but that sensor's data being out of a certain range or above or below athreshold level, in combination with one or more other sensor's databeing within or out of a particular range and/or above or below athreshold level, may be indicative of an emergency situation occurring.Accordingly, at block 2215, the system may be configured to analyze thesensor data in various ways to determine whether an emergency event maybe occurring.

At block 2217, the process flow varies depending on whether one or morethreshold levels or ranges have been exceeded in the sensor data. Asdiscussed above, this may be one or more threshold levels or ranges foran individual sensor and/or it may be one or more threshold levels orranges based on a combination of two or more sensors. Further, in someembodiments, acceptable threshold levels and/or threshold ranges may notbe static and may be adjusted in real time based on data received fromone or more sensors indicating a current flight condition. If athreshold level or range has not been exceeded at block 2217, then thesystem has determined that an emergency event is not occurring, and theprocess flow proceeds back to 2203. If at block 2217 a threshold levelor range has been exceeded, the system has determined that an emergencyevent may potentially be occurring (block 2219), and the process flowproceeds to block 2221. Although in this embodiment, the detection of anemergency event is described as being related to one or more thresholdlevels or ranges being exceeded, various other methods of detecting whenan emergency event is occurring may be used. For example, the system maybe configured to analyze a combination of parameters, potentiallysetting higher signal priority to some parameters over others. Further,the system may be configured to analyze signal frequency, compare sensordata to data stored in one or more databases, analyze sensor data inreal time, and/or the like. In some embodiments, the system may beconfigured to consider a duration of one or more signals, and/or aduration that one or more signals exceeds a threshold value or fallsoutside of a threshold range. For example, one or more signals maycomprise data outside of a threshold range, which may potentiallyindicate that an emergency situation is occurring, but a relativelyshort duration of such an occurrence may be indicative of a falsepositive. Accordingly, it can be desirable in some embodiments toanalyze the duration at which a signal falls outside of a thresholdrange and/or how often the signal falls outside of the threshold range.The system can be configured to determine that an emergency event isoccurring if, for example, the duration exceeds a threshold value and/orif one or more signals repetitively falls outside a threshold value orrange within a threshold amount of time. As an example, a system may beconfigured to determine that a downward acceleration above a thresholdlevel is potentially indicative of a rapid descent characteristic of anemergency event. However, if such relatively high downward accelerationpersists for only a short duration, it may be a false positive, becauseit may simply be due to turbulence. If the relatively high downwardacceleration persists for a threshold duration, however, it may be morelikely that a true emergency event is occurring. In various embodiments,various individual parameters and/or combinations of parameters may beused by the system in making a determination that an emergency event isoccurring or is likely occurring. For example, the system may beconfigured to detect a stall condition, which may be indicative of anemergency event, by analyzing one or more of pitch, angle of attack,altitude, airspeed, and/or the presence or absence of laminar airflowacross a leading edge of a wing or other flight surface. A stallcondition is one example of a potential emergency event that may berecovered from. For that reason, it may be desirable for the system tocontinue to monitor the situation and wait to eject the flight datarecorder and/or other components until another condition occurs, such asthe stall condition persists for a certain duration and/or the aircraftdrops below a certain altitude. In some embodiments, the system may beconfigured to communicate with a collision detection and/or avoidancesystem, and to cause ejection of the flight data recorder and/or othercomponents when the system determines a collision is imminent.

At block 2221, the process flow varies depending on whether the systemhas a relatively high confidence level in whether an emergency event isoccurring. For example, some threshold levels or ranges being exceededmay be an indicator having high likelihood that an emergency event isoccurring. For example, two separate cabin pressure sensorssimultaneously indicating an abnormally high cabin pressure may indicatewith relatively high confidence that an emergency event is occurring(e.g., a bomb exploding in the cabin). Other threshold levels or rangesmay not be associated with as high of a confidence level, and may merelybe an indicator that an emergency event may potentially be occurring,but would not produce a high enough confidence level to immediatelyinitiate the ejection process. For example, a sudden drop in altitude(and/or a sudden increased rate of descent) when the aircraft waspreviously cruising at a relatively constant altitude may be anindicator that an emergency event is occurring. It may also, however, bethe result of sudden turbulence from which the aircraft will likelyrecover. In that case, it may be desirable to delay initiation of theejection process until the system has a higher level of confidence thatan emergency event is occurring.

If the confidence level of an emergency event occurring at block 2221 isrelatively high, then the process flow proceeds to block 2213, and theejection process can be initiated. If the confidence level is notrelatively high at block 2221, then the process flow proceeds to block2223. At block 2223, the system confirms whether an emergency event isoccurring. For example, if a sensor or combination of sensor thresholdlevels and/or ranges has been exceeded, the system may continue tomonitor those sensors and confirm that their levels remain outside of athreshold level or range for a certain period of time. As anotherexample, the system may analyze data from a different sensor or set ofsensors than the ones that had a threshold level or range exceeded. Thisdifferent sensor or set of sensors may, for example, have data rangescorrelated with the ranges of the sensor or sensors having the thresholdlevel or range exceeded. If the correlated sensor data are withincertain ranges, this may increase the likelihood that an emergency eventis occurring. As another example, the system may be configured torequest confirmation from the pilot or another member of the flight crewthat an emergency event is occurring.

At block 2225, the process flow varies depending on whether theoccurrence of the emergency event was confirmed at block 2223. If anemergency event occurrence was confirmed, the process flow proceeds toblock 2213 and the ejection process is initiated. If the emergency eventwas not confirmed, the process flow proceeds back to block 2203 andproceeds as described above.

FIGS. 3A and 3A′ are a side cross-sectional view and an end view,respectively, of an embodiment of an arrangement of a detachable joint24 for detachably connecting a towed cable (for example detachable towedcable 301 shown in FIG. 2A) with the aircraft (for example, aircraft 10shown in FIG. 1). Such a design can be desirable, because it can enabletowing of a tracking device, such as TITCS 300 shown in FIG. 2A, behindan aircraft in flight, with most or all of the towing tensile loadsupported by outer tube or sheath 303, and data transmitted throughinner cable 304. The detachable joint 24 can include, in thisembodiment, at least five components: a fixed installation base 277, adata link connector 270, an annulus installation base 271, a pair ofconnectors (for example a pair of hook and loop fasteners) 272 and 274and an actuator cylinder 276 with an extendable plug 275. The fixedinstallation base 277 can be mounted on or within the aircraft fuselage12. The fixed installation base 277 can be connected to other componentsof the detachable joint 24. Two ends of the data link connector 270 canboth be cable sockets, and both can connect with pluggable data cables.One end of the data link connector 270 can connect with the data cable273 which is used to collect flight data (e.g., from a separate systemof the aircraft, sensors located on or in the aircraft, and/or thelike). The other end of the data link connector 270 connects with thedata cable 304 in towed cable 301 (shown in FIG. 2A). The annulusinstallation base 271 can be mounted on the fixed installation base 277.A pair of connectors 272 and 274 can be connected to each other(although other embodiments may comprise fewer or more connectors). Theycan be used to connect the hollow tube 303 on the annular installationbase 271. The connector 272 is mounted on top of the annularinstallation base 271 by a plug 275. The connector 274 can be fixed onone end of the hollow rope tube 303 which tows the TITCS 300 (shown inFIG. 2A). The connectors 272 and 274 can be designed to disconnect witheach other when tensile forces between the connectors exceeds athreshold amount or level. In some situations, when the aircraft isrestored to stable and safe flight, the pilot can manually separate theTITCS 300 from the aircraft 10. In this case, the pilot sends anoperational signal to the actuator cylinder 276 to move the plug 275back into, or retract into the actuator cylinder 276, thereby removingthe primary restraint that maintains the connection between the TITCSand base 271. This way, the connector 272 may then easily separate fromthe installation base 271 by a tensile force in the connector 272 orbetween the connectors 272, 274. The TITCS 300 then separates from theaircraft 10.

FIG. 3B shows a simplified schematic sectional view of an embodiment forconnecting the EFDR 16 with the TITCS 300. The embodiment illustrated inFIG. 3B may include one or more or all of the features shown in otherembodiments, such as in FIG. 2A. A data cable 281 with two pluggableunits 282 and 283 can be provided to transmit flight data from the TITCS300 to the EFDR 16 during normal flight. When the EFDR 16 is ejectedfrom the aircraft 10, the pluggable units 282 and 283 can separateautomatically from the EFDR 16 or the TITCS 300 respectively. Analternative embodiment showing a data cable 281 connecting pluggableunits 282 and 283 is illustrated in FIG. 7A, described below.

FIG. 3C illustrates another embodiment of an ejectable flight datarecorder system. The system illustrated in FIG. 3C is similar infunction to the embodiments illustrated in FIGS. 2A and 2B, and, forsimplicity, some of the features of the embodiments of FIGS. 2A and 2Bare not illustrated in this figure, but such features may be included inthis embodiment. One of the advantages of the system illustrated in FIG.3C is that the piston used for ejecting the flight data recordercomponents, in this case sabot 266, is configured to lock into placetoward the end of the cylinder after the piston has been used to ejectthe components. By locking the piston or sabot 266 in place, this canseal the end of the cylinder to help maintain aerodynamic propertiesand/or laminar flow of the aircraft, such as after an inadvertentejection or launching. In this embodiment, a spring plunger lockingmechanism is employed to achieve the locking objective, with three locks267 located evenly around the launching tube, e.g., 120 degrees betweeneach of them, although other arrangements may be used.

Another difference in the embodiment illustrated in FIG. 3C is that,instead of a hinged panel 245, as shown in FIG. 2A, the embodiment ofFIG. 3C comprises a panel 255 having a reduced strength or stress riserregion 256 which enables the ejectable components to break therethrough.This panel 255 may be part of the aircraft fuselage or skin, or it maybe part of the ejectable flight data recorder system, and an additionalpanel of the fuselage or skin positioned adjacent panel 255 may alsoneed to be opened or broken through for ejection. Further, theembodiment illustrated in FIG. 3C comprises a container, sleeve, shell,and/or the like 257 that is used to encase the ejectable components 300,401, 403. In this embodiment, instead of simply ejecting the ejectablecomponents 300, 401, 403, the system is configured to eject the shell257 as a unit, and the individual components within the shell 257 canseparate from the shell 257 after ejection or separation of the shell257 from the aircraft. Further, in the embodiment illustrated in FIG.3C, an outer or forward facing surface 258 (in this case, an inclinedsurface) of the piston or sabot 266 is shaped or configured to matewith, conform to, and/or form a seal with mating surface 259 extendinginwardly from the housing or cylinder 240. For example, when the piston266 is locked at the end of its stroke by the locking devices 267,sealing surfaces 258 and 259 may be held in contact with one another toeffect a better seal between the piston 266 and housing 240.

FIGS. 4A-4C illustrate another embodiment of an ejectable flight datarecorder system that is similar to the flight data recorder systemillustrated in FIG. 3C, as described above. With reference to FIG. 4A,the ejectable flight data recorder system comprises a housing or outerbarrel 240 having a hollow internal cavity with positioned therein asealing plug or piston 266, which is positioned behind a shell orhousing 257. The shell or housing 257 comprises another internal cavityhaving positioned therein ejectable flight data recorder 16 and aflotation and soft landing system 400. In this embodiment, the housingor shell 257 can also be used as an antenna to help increase the rangeand/or efficiency of wireless transmissions sent from and/or received bythe ejected flight data recorder 16. Further, in some embodiments, theflight data recorder 16 and/or flotation and soft landing system 400 canbe configured to be separated from the shell 257 at some point afterejection from the aircraft.

With further reference to FIG. 4A, the system comprises a gas tube orhose 231 configured to enable pressurized gas to enter the housing 240to cause the piston 266 to eject the shell 257. The system furthercomprises a cable 281 that enables data to be transmitted via wire to orfrom the flight data recorder 16 prior to ejection from the aircraft. Itshould be noted that, while the embodiment illustrated in FIGS. 4A-4Cdoes not illustrate a towed tracking system or a spring-loadedparachute, other embodiments may include a towed tracking system, suchas the towed tracking system 300 illustrated in various other figuresand described herein, and/or a spring-loaded parachute, such asparachute 403 illustrated in various other figures and described herein.

FIGS. 4B and 4C illustrate details of the locking mechanisms 267 thatcan be configured to lock the sealing plug or piston 266 in place at theend of its stroke. As can be seen in FIG. 4B, the present embodimentcomprises three locking mechanisms 267 positioned about the housing 240at equally spaced intervals. Other embodiments may comprise more orfewer locking mechanisms and/or may position them differently.

FIG. 4C is a schematic cross-sectional view of the locking mechanism267. The locking mechanism 267 comprises a protruding activation member4001 which protrudes into the bore of the housing 240. The protrusion orprotruding member 4001 can be configured to be contacted by the piston266 when the piston 266 reaches or nears its end of stroke. The piston266 can be configured to cause the protruding members 4001 to moveradially outward with respect to the housing 240, thus releasing lockingarm 4003, which enables plunger 4005 to extend radially inward under theforce of spring 4007. When the plungers 4005 have extended radiallyinward with respect to the bore of the housing 240, the plungers 4005will be positioned behind the piston or plug 266, thus locking thepiston or plug 266 in place at the end of its stroke. This can, asdescribed above, help to seal the system and help to maintain laminarflow across the aircraft skin after an ejection.

FIG. 5A shows a simplified schematic diagram of a sleeve 411 accordingto some embodiments of the present disclosure. The housing 401 mayinclude a cavity having positioned therein, for example, EFDR 16 (asshown in FIG. 2A). An airbag subsystem 404 can be placed around thehousing 401. The housing 401 and the airbag subsystem 404 can be wrappedor enclosed within the sleeve 411, before the airbag subsystem 404inflates. The sleeve 411 can be opened by the airbag subsystem 404during the inflation of the airbag subsystem 404. When the airbag system404 has inflated the sleeve 411 separates from the EFDR housing 401. Thesleeve 411 may be advantageous to, for example, provide protection forthe airbag system 404 during ejection of the device from the aircraft.

FIGS. 5B and 5C show simplified schematic diagrams illustrating aseparation process for separating the SEP 403 after the ejected EFDR 16has landed on water 62. Before the ejected EFDR 16 lands on the water62, the SEP 403 can be connected with the housing 401 by a lockingmodule 220, the details of which are illustrated in FIGS. 5B and 5C. Thelocking module 220 includes a ring 291, a plug 293 and an actuatorcylinder 295. The ring 291 can be fixed at the end of the SEP'ssuspension line. When connecting the SEP 403 with the housing 401, thering 291 can be locked with the housing 401 by a plug 293, which passesthrough the center of the ring 291. When the ejected EFDR 16 lands onthe water 62, a water sensor 292 sends a signal to activate the actuatorcylinder 295 through a signal cable 294. Then, the actuator cylinder 295pulls the plug 293 out of the ring 291 to separate the SEP 403 from theejected EFDR 16. Enabling the parachute 403 two separate from ordecouple from the housing 401 upon a water landing can be beneficial,for example, to increase the chance that the housing 401 will remain afloat on the water. If the parachute 403 remained connected to thehousing 401 after landing in the water, there can be a chance that theparachute 403 could drag the housing 401 underwater, thus making itharder to locate and/or recover the ejected flight data recorder.

Although the embodiment illustrated in FIGS. 5B and 5C comprises aspecific arrangement of ring 291, plug 293, and actuating cylinder 295,various other arrangements and/or separation devices may be utilized.For example, a ball detent mechanism may be used that positions a ballwithin a cavity of the ring or other member 291 until allowed to moveaway from that cavity by an actuator. As other examples, a magneticrelease system may be utilized, an explosive bolt may be used, and/orthe like. Further, similar concepts may be utilized upon a groundlanding. For example, the system may be configured to detect when thehousing 401 has landed on the ground, such as by analyzing data from anaccelerometer, an impact sensor, and/or the like, and to causeseparation of the parachute 403 upon determining the housing 401 haslanded on the ground. This may, for example, be advantageous to limitthe possibility that the parachute 403 drags the housing 401 to adifferent location after landing.

For the embodiments illustrated and described in connection with FIGS.2A, 2B, 3A, 3B, 5A and 5B, separation can be preferably completed bymechanical-electronical devices. No explosive devices are needed. By notusing explosive methods of separation, e.g., explosive bolts, and/orgiving more control over to the pilot, these embodiments are believedmore safe and suitable for use with civilian aircraft. This does notmean, however, that the techniques and systems disclosed herein cannotbe used with explosive methods of separation. It can be desirable,however, to limit use of explosive methods, particularly in civilianaircraft, due to a concern of accidental explosion and/or potential sideeffects of an explosive device going off on a civilian aircraft.

FIGS. 6A-6E illustrate an example embodiment of an ejection sequencewherein the parachute 403, housing 401, and towed tracking device 300can be ejected from a housing or cylinder 240. The embodimentillustrated in these figures is similar to the embodiment illustrated inFIGS. 2A and 2B, with some features not shown for simplicity. In FIG.6A, the system is shown in a waiting or ready-to-deploy state, such asthe state it would be in during normal flight (e.g., before an emergencysituation has been detected). In this case, the towed tracking device300, housing 401 (having the flight data recorder 16 positionedtherein), and spring-loaded ejection parachute 403 can be all containedwithin the housing or cylinder 240, and the parachute 403 can be held ina compressed configuration between the housing 401 and panel 245. Thetowed tracking device 300 can be electronically coupled to the flightdata recorder 16 using cable 281, similarly to as described above.

With reference to FIG. 6B, an emergency event has now been detected, andthe panel 245 has begun to swing open, such as under the force oftorsion spring 244. Because the panel 245 had been holding spring-loadedparachute 403 in a compressed configuration when the panel 245 wasclosed, spring-loaded parachute 403 is shown as also beginning todecompress and thus protrude out of the housing or cylinder 240.

As shown in FIG. 6C, the panel 245 has now sufficiently opened for theentire parachute 403 to extend out of the housing 240, enabling theparachute 403 to begin pulling the housing 401 out of housing 240. Next,as illustrated in FIG. 6D, pressurized gas has begun pushing piston 242,causing towed tracking device 300 to simultaneously be pushed out of thehousing 240 while cable 281 can also be pulling towed tracking device300. Finally, FIG. 6E illustrates the parachute 403, housing 401, andtowed tracking device 300 having fully exited the cylinder or housing240. Although not shown in this sequence of figures, in someembodiments, the towed tracking device 300 may remain connected to theaircraft and/or housing 240 by a tow cable, such as tow cable 301discussed above, to be towed behind the aircraft.

FIG. 6F is an enlarged cross-sectional view of a section of FIG. 6E. Inthis enlarged view, FIG. 6F illustrates that the housing or cylinder 240may further comprise a buffer, shock absorbing material, and/or the like249 that can perform one or more functions. For example, the material249 may comprise a shock absorbing material, such as rubber, polymer,vibration and/or shock isolation material, and/or the like that lessensthe impact of the piston 242 when it reaches its end of stroke. Further,the material 249 may be in some embodiments an at least partiallycompliant material that helps to form a seal between a front surface ofthe piston 242 and the housing 240.

FIGS. 7A-7H illustrate another embodiment of an ejectable flight datarecorder system. The embodiment illustrated in FIGS. 7A-7H is similar tothe embodiment illustrated in FIG. 2A, as described above. Onedifference in the embodiment illustrated in FIG. 7A is that the piston242 is configured to stop at its end of stroke and/or have a limitedstroke in a different manner than the piston of the embodimentillustrated in FIG. 2A. With reference to FIG. 7A, elements havingsimilar or the same reference numbers as in FIG. 2A are similar toand/or perform similar functions as described above with respect to FIG.2A. Accordingly, their functions are not described again with referenceto FIG. 7A. However, one difference is that the housing or cylinder 240comprises a circular groove 750 instead of raised edge 250 for limitingthe stroke or maximum extension of the piston 242. In this embodiment,the piston 242 comprises a plurality of spring-loaded plungers 247residing in pockets positioned around a radially external surface of thepiston 242. When the piston 242 extends sufficiently such that plungers247 can be adjacent circular groove 750, the spring-loaded plungers 247can move radially outward into the circular groove 750, thus stoppingforward or extension motion of the piston 242, and also limiting anybackward or retraction motion of the piston 242.

FIGS. 7B and 7C illustrate a portion of a sequence of ejecting theflight data recorder 16 and related components, similarly to asillustrated in FIGS. 6A-6E, described above. As shown in FIG. 7B, thepanel 245 has rotated outward, enabling spring-loaded parachute 403 toexpel itself from the internal cavity of the housing or cylinder 240. InFIG. 7C, the flight data recorder 16 enclosed in housing 404 has beenmostly ejected from the housing or cylinder 240, and piston 242 can belocked in place at the end of it stroke. As shown in FIG. 7C, thespring-loaded plungers 247 have extended radially outward into circulargroove 750. One advantage of this arrangement over the arrangement shownin FIG. 6E is that the piston 242 is now mechanically limited orrestrained from moving backward back into the cylinder 240, which canhelp to seal the hole in the aircraft fuselage and/or to limit anyadverse aerodynamic effects of the hole in the fuselage through whichthe ejected components passed.

FIGS. 7D and 7E are a side cross sectional view and an end view,respectively, of the cylinder or housing 240 of FIG. 7A. FIGS. 7F and 7Gare a front view and a side cross sectional view, respectively, of thepiston 242 of the embodiment of FIG. 7A. As shown in these views, thepiston 242 in this embodiment comprises four equally spaced plungers247, each plunger 247 having a spring 751 positioned behind it forbiasing the plunger radially outward. Although in this embodiment thesystem comprises four spring-loaded plungers 247, other embodiments maycomprise more or fewer plungers. Further, various other lockingmechanisms may be used in addition to or in lieu of a spring-loadedplunger system.

FIG. 7H illustrates an embodiment of the ejectable flight data recordersystem of FIG. 7A in position behind a panel 260 of an aircraft fuselage12. The embodiment illustrated in FIG. 7H is similar to the embodimentillustrated in FIG. 2B, as described above.

Emergency Inflatable Soft Landing System (EISS)

The disclosure below provides additional details for systems and devicesthat comprise inflatable features for assisting in a soft and/orsurvivable landing of a component ejected from an aircraft. Thesesystems and devices may be used in combination with other systems anddevices disclosed herein (for example, ejectable flight data recorders,towed tracking devices, and/or the like) and/or with other types ofdevices intended to be ejected or separated from an aircraft in flight.With reference to FIG. 1, such an ejectable device comprising inflatablesoft-landing features as disclosed herein may be positioned at variouslocations on an aircraft 10, including, for example, possible locations110. Although other locations may be used, one possible first locationis generally at the rear part of the aircraft and a possible secondlocation is at the backward portion of the tip of the vertical tail.

FIGS. 8A and 8B show a simplified schematic cross-section of anembodiment of an EISS 400 according to an aspect of the presentdisclosure. A housing 401 defines a compartment for enclosing an EFDR16, a valve 406, a gas-tank module 407, pipes 408, and data cables 409,281, 410, and 294. A shock-absorbing filler material 402 can be providedfor filling the space between the housing 401 and EFDR and othercomponents enclosed by the housing 401, as shown in FIG. 8B. A SEP 403can be connected with the housing 401. The SEP 403 can be provided forassisting in ejection from the aircraft and/or decelerating the EFDRduring its descent towards land or water. An inflation subsystemincludes an altitude sensor 405, valve 406, a gas-tank module 407, pipes408, data cable 409 and data cable 410. The inflation subsystem can beprovided for inflating the airbag subsystem 404. The altitude sensor 405can be mounted in housing 401 or on the airbag subsystem 404. Altitudedata measured by the altitude sensor 405 can be transferred to the EFDR16 through data cable 409. Flight data from the aircraft can betransferred by the TITCS 300 to the EFDR 16 through the data cable 281(assuming the EFDR 16 is still connected to the TITCS 300). The valve406 can be controlled by the EFDR 16 through data cable 410. Thegas-tank module 407 may include one or more gas tanks. The gas-tankmodule 407 can be provided for storing compressed gas used for inflatingairbag subsystem 404. Pipes 408 connect the valve 406 with the airbagsubsystem 404. Airbag subsystem 404 can be placed on the outside surfaceof the housing 401. The airbag subsystem 404 and the housing 401 can bepreferably wrapped within or enclosed by a sleeve 411. The sleeve 411can separate from airbag subsystem 404 after, or during the inflation ofthe airbag subsystem 404. The airbag subsystem 404 can include severalairbag modules. Each airbag module comprises one or more airbags. Theairbag subsystem 404 can be provided for achieving or assisting inachieving a soft-landing and/or buoyancy in the event of a waterlanding. A locking module 220 can be mounted in the housing 401 and canbe in operative communication with a water sensor 292 by a data cable294. The water sensor 292 may be mounted on the housing 401 or on theairbag subsystem 404.

FIG. 8C shows another simplified schematic cross-section of anembodiment of an EISS 400. The EISS 400 is similar to the embodimentillustrated in FIGS. 8A and 8B and is configured to disconnect from theTITCS 300 (shown in FIGS. 8A and 8B) when a threshold tensile force inthe connecting cable is exceeded. This tensile force can be caused byair drag produced from the SEP 403 when it deploys or opens in theairstream surrounding the aircraft. When separation is achieved from theTITCS 300, the EFDR 16 held by the EISS 400 can be decelerated duringthe descent by the SEP 403. If the EFDR 16 falls below a presetaltitude, the valve 406 can be activated. The valve 406 releasescompressed gas from the gas-tank module 407. The compressed gas can betransferred to inflate the airbag subsystem 404 through pipes 408. FIG.8C illustrates the airbag subsystem 404 in an inflated configuration,while FIGS. 8A and 8B illustrate the airbag subsystem 404 in a deflatedor non-inflated configuration. The inflated airbag subsystem 404 canhelp to decelerate the EFDR 16 by increasing the drag forces acting onthe EISS as it descends through the atmosphere. The sleeve 411 (shown inFIGS. 8A and 8B) can separate from airbag subsystem 404 after, or duringthe inflation of the airbag subsystem 404. In FIG. 8C, the sleeve 411 isnot shown, because it has separated from the airbag subsystem 404. Insome embodiments, one or more additional parachutes may be coupled tothe EISS 400 and configured to deploy after ejection from the aircraft,and/or below a threshold altitude, to further slow the descent of theEFDR 16.

FIG. 8D illustrates an alternative embodiment of an EISS 400 similar tothe embodiment shown in FIG. 8C but having a different inflated shape orarrangement of the airbag subsystem 404. Specifically, the airbagsubsystem 404 shown in FIG. 8D comprises a generally cylindricalinflated shape, whereas the airbag subsystem 404 shown in FIG. 8Ccomprises three distinct inflatable shapes, namely a top annular shapedportion, a bottom annular shaped portion, and a middle portioncomprising a rounded or spherical shape positioned about the housing401. One advantage of the configuration shown in FIG. 8D over theconfiguration shown in FIG. 8C is that the airbag subsystem 404 is moreuniform about the housing 401, and thus the system may be more capableof dampening impact shock when the system lands at a random orientation,instead of in a vertical orientation as depicted in the figures.

FIG. 9A and FIG. 9B illustrate configurations of the EFDR held by theEISS 400 (for example, the embodiment of FIG. 8C) after a soft landingis achieved on ground 61 or water 62, respectively. When the EFDR 16lands on water 62 (as shown in FIG. 9B), the airbag subsystem 404provides sufficient buoyancy so that the EISS floats on or near thesurface of the water 62. When the EISS reaches the water a lockingmodule (for example, the locking module 220 illustrated in FIGS. 5B and5C) unlocks, thereby separating the SEP 403 from the housing 401. Whilethe EFDR 16 floats on the water a shark repellent 412, which isdesirably painted or coated on the airbags 404 is diffuses in water 62.This can protect the EFDR 16 from being swallowed by sharks. When theEFDR lands on the ground (as shown in FIG. 9A), the airbag subsystem 404can cushion the landing, reducing shock loading on the internalcomponents. Further, although not shown in FIG. 9A, in some embodiments,the parachute 403 can also automatically separate, similar to as whenthe device lands in water. FIGS. 9C and 9D illustrate configurations ofthe EFDR held by the EISS 400 after a soft landing is achieved on ground61 or water 62, respectively, but using the embodiment shown in FIG. 8Dinstead of FIG. 8C.

FIG. 9E shows an embodiment of a multi-gas-tank arrangement of the gastank module 407. The number of gas tanks in this embodiment can be morethan one, for example, to enable having a different gas tank for eachairbag module. The corresponding valves 406 and data cables 410 for thetanks may also be greater than one, as shown. A multi-gas-tankarrangement can be desirable as each airbag module of the airbagsubsystem 407 can be inflated independently, which can make for a moreuniform and consistent inflation of each airbag module. In someembodiments, there are fewer gas tanks, but more than one valve for eachgas tank, thus also enabling independent inflation of at least some ofthe airbag modules.

FIGS. 10A-10G illustrate additional embodiments of inflatable softlanding and flotation systems. FIG. 10A shows a simplified schematiccross-section of an embodiment of an emergency inflatable soft-landingand floating subsystem. The emergency flight data recorder 21 can belocated in a housing 27. The elastic material 228, such as cellularplastic, can be filled between emergency flight data 21 and housing 27,which can absorb the impacting energy. The emergency flight datarecorder 21 and housing 27 can be attached to each other by springs 224,which can buffer the energy of impacting during landing to protectemergency flight data recorder from impact.

An airbag subsystem, which can include three airbag modules 28, 29, 210,can be attached on the housing 27, which can be inflated by an inflationsubsystem 22. The top airbag module is 28. The circle-around airbagmodule is 29. The bottom airbag module is 210. The airbags in the topand/or the bottom airbag modules can be preferably cyclic airbags. Eachairbag module can comprise one or more airbags. The airbags can be madeof the material that is strong enough to prevent puncture and has goodpressure tightness to prevent the penetration of water. The inflationsubsystem can be a single-gas-tank arrangement, shown in FIG. 10A, or amulti-gas-tank arrangement, shown in FIG. 10G. The elastic material 228can also be filled between the inflation subsystem and housing 27,absorbing the impacting energy. The compressed air, stored in gas tankcan make airbags be fully inflated in a few seconds. A transponder 223and a height sensor 227 can be mounted at the center of top airbagmodule 28 and data cable 219 can go through the center of bottom airbagmodule 210. The inflation subsystem 22 and emergency flight datarecorder 21 can be attached each other directly or by a connector 213.The connector 213 can be a spring, which can absorb the impact energywhen crashing.

The gas tank of inflation subsystem can be under the emergency flightdata recorder, close to the bottom airbag module. There can be a ballastweight 229 under the emergency flight data recorder, close to bottomairbag module. This ballast weight can be cyclic and made of steel. Theballast weight can make the whole emergency inflatable soft-landing andfloating system get a low center of gravity. There can be a pipe 214connects the valve 23 with gas tank of inflation subsystem 22. The valvecan be a time-delay switch controlled by signal from emergency flightdata recorder. A data cable 225 connects the valve 23 and emergencyflight data recorder. A height sensor 217 can also be connected with theemergency flight data recorder 21 by cable 226. The height data from theheight sensor 217 can be another condition of activating the valve 23.Inflation under a certain height can protect airbags fromover-inflation, which can lead to breaking of airbags. When triggered byemergency flight data recorder, the valve is open to exhaust gas fromgas tank. Some pipes 24, 25, 26 can connect the valve and airbags. Thesepipes run through the housing 27 by holes 215, 216,217, transforming theair to airbag modules. The canopy of parachute 211 can be stitched onthe circle-around airbag module 29 and the suspension lines 212 connectthe parachute 211 and housing 27. The parachute 211 can be inflated bythe air during the falling, decelerating the falling emergency flightdata recorder 21. A shield 220 coves the parachute 211, connected with aspring-loaded extraction parachute 222 by an iron ring 221, protectingthe subsystem from impacting. The shield bundles the rest part ofsoft-landing subsystem by a Velcro. A data cable 219, connected with theemergency flight data recorder, runs through a hole 218, transformingthe data from towing tracking system to the emergency flight datarecorder. The data cable 219 can be pulled away from the emergencyflight data recorder 21 or towing tracking system. Then the datatransforming between emergency data recorder and forward devices can bestopped.

When the data cable 219 is detached from emergency flight data recorder,the emergency data recorder start to analyze both the data lost stateand the height data from sensor 217. Once the data losing happened andthe height data satisfy the certain threshold, the emergency flight datarecorder sends the energizing signal to the valve 23 through data cable225. Once the valve gets the energizing signal and after a fraction of asecond, the gas can be exhausted from the gas tank by time-delay switchand led to airbag modules 28, 29, 210 by pipes 24, 25, 26, inflatingthese airbags in a few seconds. In the inflation process of airbags, theshield, covering the parachute 211, can be opened by the expending forcefrom the airbags.

FIG. 10B shows a simplified schematic cross-section of a working state(e.g., while descending) of the apparatus of the embodiment of FIG. 10A.The airbag modules 28, 29, 210 and the parachute 211 can be inflated anddecelerate the emergency flight data recorder 21 in the air, softlanding or floating it finally. The combination of the parachute andairbags makes devices even more compact, which integrates thesuperiority of parachutes and airbags and improve the validity andreliability of slowdown and cushion landing effectively, making thesubsystem much better than using anyone of them alone as thedeceleration and soft-landing devices. The gas tank 22 and the ballastweight 229 can be positioned under the emergency flight data recorderand this arrangement can make the center of gravity of the wholeemergency inflatable soft-landing and floating system more close to thebottom airbag module. This arrangement can keep the transponder 223always pointing to sky, no matter on land or floating on water, which isgood to transmitting the signal.

FIG. 10C shows the first stage of the soft-landing system triggermechanism. This stage is defined from the moment when the emergencyflight data recorder is ejected out of the aircraft to the moment whenthe spring loaded extraction parachute separates from the emergencyflight data recorder. This stage preferably only last very few secondsbecause the separation happens rapidly. At this stage, the wholesoft-landing system can be bundled by the shield 220. A data cable 219connects the emergency flight data recorder and the towing trackingsystem. The data joint on both sides of the data cable can be designedto be detachable. When the emergency flight data recorder is ejected outof the aircraft, the aerodynamic drag provided by the spring loadedextraction parachute 222 pulls the emergency flight data recorder towardthe opposite direction of the aircraft. This pulling force can separatethe data cable 219 from towing tracking system or emergency flight datarecorder. Once the data line is detached, the emergency flight datarecorder may not receive the signal data. In an embodiment, the loss ofdata signal and/or the detection of a certain height data can be asignal to trigger the gas tank. The airbag modules in the soft-landingsystem can start to inflate based on such a trigger. The expanding forcefrom inflation of airbags can open the shield, which can be pulled awayby the spring loaded extraction parachute. In the end of this stage, thespring loaded extraction parachute starts to separate from the emergencyflight data recorder and the airbag-parachute subsystem starts to beinflate.

FIG. 10D shows the second stage of the soft-landing mechanism. Thisstage is defined from the moment when the spring loaded extractionparachute separates from the emergency flight data recorder to themoment when the emergency flight data recorder lands on land or water.In this stage, the airbag modules 28, 29, 210 and parachute 222 can befully inflated to work on deceleration and soft-landing. There can betwo possible scenarios in the soft-landing process. The first scenariois that the airbag-parachute subsystem softly land the whole emergencyinflatable soft-landing and floating subsystem ejected at high altitude.The second scenario is that the airbag-parachute subsystem softly landthe whole emergency inflatable soft-landing and floating subsystemejected at low altitude. In the second scenario, the parachute of theairbag-parachute subsystem may not be able to fully inflate before theemergency flight data recorder lands in to the water or on the land. Theaerodynamic shape of the airbag can be designed to not only provideprotection from the impact when the emergency flight data recorder landsin to the water or on the land but also provide aerodynamic drag to slowthe dropping velocity. The airbag modules 28, 29 & 210 can be inflatedby same air tank through different pipes. The parachute 222 ofairbag-parachute subsystem can be inflated by the air flow. Theparachute of airbag-parachute subsystem slow the dropping velocity downnot only by its air dynamic drag force but also by diverting the airflow direction so that the momentum exchange of between the soft-landingsystem and the air flow can make the soft-landing system into a certainglide mode.

FIG. 10E is an illustration of an emergency flight data recorder 21landing on the land 401 by airbag-parachute subsystem. The bottom airbagmodule and the circle-around airbag module can absorb main energy ofimpacting land when landing. The top airbag module can protect thetransponder 223 from impact.

FIG. 10F is an illustration of an emergency flight data recorder 21floating on a body of water 402. The three inflated airbag modules canproduce the buoyancy to float the emergency flight data recorder 21.With the low center of gravity, the transponder can always be keptpointing to the sky. When the emergency flight data recorder is floatedon water, the shark repellent 229, painted on airbags, can diffuse inwater, protecting emergency flight data recorder from swallowing bysharks.

FIG. 10G shows an embodiment of a multi-gas-tank arrangement. Themulti-gas-tank arrangement of inflation subsystem comprises three ormore gas tanks 51. With multi-gas-tank arrangement, each airbag modulecan be inflated isolated and this can make each airbag module gets ahomogeneous inflation. Furthermore, multi-gas-tank arrangement canimprove the reliability of airbag modules, compared with the failure ofinflation of airbags with one-gas-tank.

FIG. 10H illustrates another embodiment of a soft landing and flotationsystem. The housing or fairing 27 can be preferably cylindrical inshape. One end has a shape of a hemisphere, which is called the leadpart. The other end takes the shape of a cylinder, which is called therear part. This particular shape can ensure that the device descends ina stable posture. This shape also ensures a better posture when thedevice hits the water to reduce impact from diving into the water to theentire system.

The airbag protection device 1001 protects the airbag from impact. Theprotection device covers the airbags 28 and seals the airbags 28 in theinstallation chamber before it inflates in order to protect it.

Within the fairing 27 can be an inflation device 22, sensors andcontrols 1005 and/or a position signal transmitter 223, e.g., radiobeacon. The emergency inflation device can provide rapid inflation forthe airbag. When the device is descending in the sky, the inflationdevice will be activated by the sensor, e.g., altitude sensor, allowingrapid air flow into the bag. This kind of inflation device has a smallsize and reacts rapidly to sensors.

The sensors and the control device provide real-time data collection andinflation control in the entire fly-ejection, descending, and groundlanding/water landing process. The sensor will collect operating data ofdifferent equipment and transmit these data to the control device. Whenthe value of designated parameters reach or exceed the designed criticalvalue, the control device will activate the inflation device. Theparameters to activate the system may include a measured pressuredifference.

Surrounding the equipment, the airbags 28 can be preferably multi-celland annular. As shown in FIG. 10H the airbags surround the fairing 27containing the controls 1005, inflation device 22 and EFDR 21. Theairbags 28 not only provide all-round buffering in land crash, greatlyreducing ground impact damage to the equipment, but also make theequipment float on the water in sea crash. The airbags, as well as theEmergency Flight Data Recorder (EFDR) and other devices, can bepreferably coated with shark prevention material to prevent fishswallowing, which improves the survivability of the entire device on thesea. In the rear part of the fairing, the distribution of airbagspreferably looks like a wedge shape. With increasing diameters ofairbags, this design can decelerate and buffer the whole system,improving the anti-overturn ability and floating stability.

Preferably, there is no airbag on the rear end face of the fairing sothat the position signal can be transmitted to the satellite moreeffectively. In other embodiments, however, an airbag may be positionedon the rear end face.

When the entire device is ejected from the airplane and fall to acertain elevation, the sensors can activate the inflation devices toinflate airbags. The parachute 211 can be inflated by the air todecelerate or reduce the descending rate of the whole device. The airbagcan provide all-round buffering in land crash or make the equipmentfloat on the water in sea crash. The positioning system can beconfigured to send out the position signal. In some embodiments, theparachute system 211 deploys immediately upon separation from theaircraft. The parachute may in some embodiments have a maximum span ofless than 900 mm, or 0.9 meters but other maximum spans can be used withthe system.

Transmission of Flight Data and Positioning Signals

FIG. 11A shows a simplified illustration of an embodiment of a firstdata link between the aircraft 10 and a TITCS 300 through cable 301, andthe TITCS 300 and the EFDR 16 through cable 281 before the EFDR 16 isdisconnected from the TITCS 300. In this configuration, flight data ispreferably transmitted from the aircraft 10 to the EFDR 16 through theTITCS 300. In some embodiments, images can be captured by the TITCS 300,such as images showing an external view of the aircraft 10. These images(and/or flight data) can be transmitted from the TITCS 300 to EFDR 16through data cable 281. Towed cable 301 can be connected at one end to adetachable joint 24 and at the opposite end with the TITCS 300. Thepositioning of the detachable joint 24 in FIG. 11A is similar to thelower position 110 shown in FIG. 1. The detachable joint 24 does notnecessarily need to be located at that position, however, and could belocated at upper location 110 of FIG. 11A, or at any other location thatenables the TITCS 300 to be towed behind the aircraft 10. The detachablejoint 24 may be similar to, for example, joint 24 illustrated in FIG.3A, as described above.

FIG. 11B shows a simplified illustration of a second data link betweenthe EFDR 16 and the TITCS 300 after the EFDR 16 is disconnected from theTITCS 300 (for example, by disconnecting cable 281 shown in FIG. 11A).In this case, the images can be captured by the TITCS 300 (and/or flightdata is still transmitted from the aircraft 10 to the TITCS 300). Theseimages and/or flight data can be transmitted from the TITCS 300 to theEFDR 16 by wireless technology.

FIG. 11C illustrates an embodiment similar to the embodiment illustratedin FIGS. 11A and 11B, but in FIG. 11C, the towed tracking system 300 isfurther coupled to an aerodynamic stabilization device 1150. Theaerodynamic stabilization device 1150 comprises a plurality of fins 1151configured to help stabilize the tracking system 300 while being towedbehind the aircraft 10. As described elsewhere, in some embodiments, aparachute may be used as an aerodynamic stabilization device. Further,as described elsewhere, one or more aerodynamic stabilization featuresmay be built into the towed tracking system 300, such as one or morefins, airfoils, parachutes, and/or the like.

FIG. 12A shows a simplified illustration of a third data link between asearch and rescue aircraft 510 and the EFDR 16, the EFDR 16 and a relaysatellite 515, a ground control center 516 and the relay satellite 515,and the relay satellite 515 and a cloud server 517 after the EFDR 16 haslanded on water 62. A radio beacon 511 and data uploading antenna 512can be wrapped in a shield 514, which can be preferably waterproof andcan offer protection from impact with the water. When the EFDR 16 landson water 62, the radio beacon 511 and a positioning module (for exampleGPS module, BEIDOU module, Galileo module) 513 can be activated byonboard water sensors or by other means (although in other embodimentsthe position module(s) may be activated at an earlier time, such as toenable position tracking while the EFDR 16 descends). The radio beacon511 can broadcast an SOS and/or positioning signal. The positioningmodule 513 can be configured to search for a signal from a satellite 515automatically. When the positioning module 513 establishes a stable datalink with the satellite 515, it can transmit real-time locationcoordinates to the satellite 515 using the radio beacon 511. If thepositioning module 513 cannot successfully establish a data link withthe satellite 515 or maintain a stable data link, the positioning module513 can automatically shuts down or stop transmitting data or go into asleep mode or enter some other power save mode to save battery power.The radio beacon 511 can be configured to continue broadcasting apositioning signal of the EFDR's last known location and/or the SOSsignal. When the search and rescue aircraft 510 captures the SOS signalfrom the EFDR 16, the EFDR can start to transmit flight data to thecloud sever through the satellite 515 using the data upload antenna 512.The ground control center 516 can receive the SOS and positioning signalthrough the data link with for example the cloud server 517. The groundcontrol center 516 can decide whether it will allow data to be uploadedto the cloud sever 517 or shut down the data uploading antenna 512, suchas to save battery power. The data transmission protocol preferably cansupport continuation of transmission from the point of interruption toimprove data transmission efficiency and/or prevent data loss.

The data link in FIG. 12A can transmit flight data to the cloud serverrapidly as a data back-up, which increases the security of the flightdata, in case the EFDR 16 is eventually lost and/or damaged. In themeantime, this data link can also provide positioning signals to arescue team.

FIG. 12B shows a simplified schematic diagram of the data and signaltransmission discussed in connection with in FIG. 12A among the searchand rescue aircraft 510, the EFDR 16, the satellite 215, the groundcontrol center 516 and, the cloud server 517 after the EFDR 16 hadlanded on the ground 61 or in the mountains 521. The data link and thefunctioning principles in FIG. 12B are the same as that in FIG. 12A,except that the water sensor can be replaced by other sensors (forexample an altitude sensor, impact sensor, accelerometer, and/or thelike) to activate the radio beacon 511 and/or the positioning module513.

FIG. 12C is a schematic illustration of another embodiment of a datatransfer and communication system between a landing system 1201 (forexample, as shown in FIG. 10H and other figures) and a relay satellite1203 and/or a data storage and transfer system (such as shown in FIG.11C). This system comprises radio beacon 1205, data upload antenna 1207,relay satellite 1203 and cloud server 1209. The radio beacon 1205 and/orthe data upload antenna 1207 can be internal devices of the emergencyflight data recorder. The relay satellite 1203 may be, for example, anavigation satellite or communication satellite which has an enoughbandwidth.

After the emergency flight data recorder (EFDR) is ejected from theairplane or covered by water, the internal radio beacon 1205 and theupload antenna 1207 will be automatically activated. They caneffectively transmit signal when the antenna or the shell of EFDR ispartial (or fully) merged into the water. They can also upload goodquality data during a complex electromagnetic environment such as athunderstorm.

The radio beacon 1205 can be used to constantly or regularly transmit alimited amount of data, such as only two sets of signal which can be SOSsignals and/or GPS location signals. The upload antenna 1207 cantransmit more complete data information to the cloud server. It willautomatically search GPS/Beidou navigation satellite (or communicationsatellite) after activated, then it will use the satellite as a relay totransmit SOS signal to FAA 1211 as well as the civil aviation departmentof the nearest country while uploading the data in EFDR to the cloudserver. Considering the data in EFDR will be helpful to locate thecrashed airplane while the audio data in the cockpit voice recorder(CVR) can be relatively large, the upload antenna will upload the EFDRdata first.

The data link preferably comprises reliable transmit devices andadvanced transmission protocol. The data link and the upload antenna canrapidly backup flight information to the cloud, it can also transmit itslocation to the search team in real-time. Through the “Emergency FlightData Recorder—Satellite—Cloud Server” data link, the upload antenna cantransmit not only the short SOS and location signals but also the flightdata in EFDR and the audio data in CVR efficiently. In the meantime, theapplication of high bandwidth data link provides a foundation for futuresystem update. Through advanced transmission protocol, the uploadantenna supports resuming of file transfers to improve efficiency ofdata transfer and to prevent data loss. The emergency flight datarecorder will drift in the sea after crash, through real time cloudsharing data link, the location information of the emergency flight datarecorder will upload to the search team in time.

Through the two-way data link, the ground station can control the uploaddevice in EFDR to provide a battery manage function. Both radio beaconand upload antenna require energy supply, so two-way data link can beused instead of transmit-only antenna to manage the battery for thesystem. Considering that the radio beacon is mainly used to locate theemergency flight data recorder, its energy supply can become a firstpriority. So the upload antenna will stop transmitting (except locationsignal) by remote command after the data is fully uploaded to savebattery for the radio beacon.

The data transmit module integrates the ejectable emergency flight datarecorder, the satellite system and the ground cloud server. It cantransmit flight data to the cloud rapidly which assures the safety ofthe flight information. In the meantime, this module can also transmitthe location information to the search team in real-time, this increasesthe efficiency of search mission. Through an advanced control method,the reliability of data transmit can be increased, the power supply ofthe emergency flight data recorder internal device can be morereasonable, which provides a longer beacon power supply.

The data transmit module has a complete high speed two-way cloud datalink. It takes full advantage of the navigation satellite and thecommunication satellite system, so it is capable to backup large amountof data in short time. The advanced transmission protocol can assure thesafety of data and the real-time location transmit. These providesecurity for further search mission and accident analysis.

Tow-Type Image Tracking and Capturing Systems (TITCS)

FIGS. 13A and 13B shows a simplified schematic cross-section of anembodiment of a TITCS 300 and a front view, respectively. A towed cable301 can be provided for connecting the aircraft 10 with a stabilizingparachute 302 (as shown in FIG. 14). This towed cable 301 includes of adata cable 304 enclosed within a hollow rope tube 303. One end of thetowed cable 301 can be connected to the aircraft by a connector 274. Theother end of the towed cable 301 can be connected to a stabilizingparachute by a connector 306. Using this towed cable, the TITCS can betowed behind the aircraft when the TITCS is ejected. The stabilizingparachute 302 provides improved flight stability for the TITCS. This canbe useful for improving the performance of the TITCS. Although thisembodiment uses a parachute 302 for stabilization, additional or otheraerodynamic stabilization devices may be used, such as fins, wings,airfoils, and/or the like.

With continued reference to FIGS. 13A and 13B, a multi-eyes video module307 can be provided for capturing images of the aircraft. The multi-eyesvideo module 307 can be located on an outside surface of the forepart ofthe stabilizing parachute assembly 308. The multi-eyes video module 307comprises several cameras (although in other embodiments may onlycomprise one camera). It can be advantageous, however, to have multiplecameras, such as to collect more information about the aircraft and/orsurrounding environment. A data processing and transmission module(DPTM) 309 can be located at a chamber 310. This chamber can be in theforepart of the stabilizing parachute assembly 308. The DPTM 309 can beconnected to the aircraft by data cable 304, which allows wired datatransmission from the aircraft to the TITCS. Some of the data cables 311connect the multi-eyes video module 307 with the DPTM 309. When atrigger signal from, e.g., the aircraft, can be transferred to themulti-eyes video module 307, the multi-eyes video module 307 can beactivated to capture images (although in some embodiments they may alsoor alternatively be triggered automatically and/or by the DPTM 309).Then, the data cables 311 transmit these images to the DPTM 309. Theimages can be processed and/or stored by the DPTM 309. In an embodiment,these images can be transmitted to the EFDR 16 by a data cable 281(assuming the EFDR 16 is still coupled to the TITCS 300). The DPTM 309can be connected with the ejected EFDR 16 by the data cable 281 throughan opening vent of the stabilizing parachute 305. When the EFDR 16disconnects from the TITCS 300, the DPTM 309 can be configured to switchto transmitting the data wirelessly to the EFDR 16. Although not shownin FIG. 13A, in some embodiments the cable 281 may be encased in orsurrounded by a sheath, rope, tube, and/or the like, similar to sheath303 disposed about cable 304.

As mentioned above, FIG. 13B shows a simplified left view of the TITCS300. The multi-eyes video module 307 can be located on the outsidesurface of the forepart of stabilizing parachute assembly 308. Themulti-eyes video module 307 comprises several cameras (in thisembodiment six), but could comprise less or more in other embodiments.Also, each camera may be positioned to capture a view along a differentline of sight.

FIG. 14 illustrates the embodiment of FIGS. 13A and 13B being towedbehind aircraft 10. When the TITCS 300 is ejected, the stabilizingparachute 302 can still be towed by aircrafts 10. The multi-eyes videomodule 307 captures images, preferably of the aircraft 10 and/or thesurrounding environment. These images can be processed and saved by theDPTM 309. In an embodiment, the DPTM transfers these images to the EFDR16 (either wired or wirelessly).

Computing System

FIG. 15 is a block diagram depicting an embodiment of a computerhardware system configured to run software for implementing one or moreembodiments of the emergency situation diagnostic systems and othersystems described herein.

In some embodiments, at least a portion of the systems described abovetake the form of some or all of the computing system 1500 illustrated inFIG. 15, which is a block diagram of one embodiment of a computingsystem that is optionally in communication with one or more computingsystems 1517 (for example, other systems of the aircraft, satellitesystems, ground systems, user access point systems used to configure theemergency situation diagnostic system, and/or the like) and/or one ormore data sources 1519 (for example, sensors, inputs, databases,external systems, and/or the like) via one or more networks 1516. Thecomputing system 1500 may be used to implement one or more of thesystems and methods described herein. While FIG. 15 illustrates oneembodiment of a computing system 1500, it is recognized that thefunctionality provided for in the components and modules of computingsystem 1500 may be combined into fewer components and modules, furtherseparated into additional components and modules, and/or in someembodiments the system may comprise fewer or additional components andmodules. For example, a fully-autonomous system may not comprise amultimedia device 1510 and/or user interfaces 1512, although amultimedia device and/or user interface may be desirable in someembodiments, such as to facilitate human interaction with the system,such as for configuration of the system.

Emergency Situation Diagnostic System Module

In one embodiment, the computing system 1500 comprises an emergencysituation diagnostic system module 1506 that carries out one or more ofthe functions described herein with reference to determining when toinitiate an ejection procedure and/or accomplishing one or moreprocesses included in the ejection procedure and/or after ejection,including any one of the techniques described above. The emergencysituation diagnostic system module 1506 and/or other modules may beexecuted on the computing system 1500 by a central processing unit 1502discussed further below.

In general, the word “module,” as used herein, refers to logic embodiedin hardware or firmware, or to a collection of software instructions,possibly having entry and exit points, written in a programminglanguage, such as, for example, COBOL, CICS, Java, Lua, C or C++. Asoftware module may be compiled and linked into an executable program,installed in a dynamic link library, or may be written in an interpretedprogramming language such as, for example, BASIC, Perl, or Python. Itwill be appreciated that software modules may be callable from othermodules or from themselves, and/or may be invoked in response todetected events or interrupts. Software instructions may be embedded infirmware, such as an EPROM. It will be further appreciated that hardwaremodules may be comprised of connected logic units, such as gates andflip-flops, and/or may be comprised of programmable units, such asprogrammable gate arrays or processors. The modules described herein arepreferably implemented as software modules, but may be represented inhardware or firmware. Generally, the modules described herein refer tological modules that may be combined with other modules or divided intosub-modules despite their physical organization or storage.

Computing System Components

In one embodiment, the computing system 1500 also comprises a mainframecomputer suitable for controlling and/or communicating with largedatabases, performing high volume transaction processing, and generatingreports from large databases. The computing system 1500 also comprises acentral processing unit (“CPU”) 1502, which may comprise a conventionalmicroprocessor. The computing system 1500 further comprises a memory1504, such as random access memory (“RAM”) for temporary storage ofinformation and/or a read only memory (“ROM”) for permanent storage ofinformation, and a mass storage device 1508, such as a hard drive,diskette, or optical media storage device. Typically, the modules of thecomputing system 1500 are connected to the computer using a standardsbased bus system. In different embodiments, the standards based bussystem could be Peripheral Component Interconnect (PCI), Microchannel,SCSI, Industrial Standard Architecture (ISA) and Extended ISA (EISA)architectures, for example.

The computing system 1500 may comprise one or more commonly availableinput/output (I/O) devices and interfaces 1512, such as a keyboard,mouse, touchpad, and printer. In one embodiment, the I/O devices andinterfaces 1512 comprise one or more display devices, such as a monitor,that allows the visual presentation of data to a user. Moreparticularly, a display device provides for the presentation of GUIs,application software data, and multimedia presentations, for example. Inone or more embodiments, the I/O devices and interfaces 1512 comprise amicrophone and/or motion sensor that allow a user to generate input tothe computing system 1500 using sounds, voice, motion, gestures, or thelike. In the embodiment of FIG. 15, the I/O devices and interfaces 1512also provide a communications interface to various external devices. Thecomputing system 1500 may also comprise one or more multimedia devices1510, such as speakers, video cards, graphics accelerators, andmicrophones, for example.

Computing System Device/Operating System

The computing system 1500 may run on a variety of computing devices,such as, for example, an electronic board, a server, a Windows server, aStructure Query Language server, a Unix server, a personal computer, amainframe computer, a laptop computer, a tablet computer, a cell phone,a smartphone, a personal digital assistant, a kiosk, an audio player, ane-reader device, and so forth. The computing system 1500 is generallycontrolled and coordinated by operating system software, such as z/OS,Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, WindowsVista, Windows 7, Windows 8, Linux, BSD, SunOS, Solaris, Android, iOS,BlackBerry OS, or other compatible operating systems. In Macintoshsystems, the operating system may be any available operating system,such as MAC OS X. In other embodiments, the computing system 1500 may becontrolled by a proprietary operating system. Conventional operatingsystems control and schedule computer processes for execution, performmemory management, provide file system, networking, and I/O services,and provide a user interface, such as a graphical user interface(“GUI”), among other things.

Network

In the embodiment of FIG. 15, the computing system 1500 is coupled to anetwork 1516, such as a LAN, WAN, or the Internet, for example, via awired, wireless, or combination of wired and wireless, communicationlink 1514. The network 1516 communicates with various computing devicesand/or other electronic devices via wired or wireless communicationlinks. In the embodiment of FIG. 15, the network 1516 is communicatingwith one or more computing systems 1517 and/or one or more data sources1519.

Access to the emergency situation diagnostic system module 1506 of thecomputer system 1500 by computing systems 1517 and/or by data sources1519 may be through a web-enabled user access point such as thecomputing systems' 1517 or data source's 1519 personal computer,cellular phone, smartphone, laptop, tablet computer, e-reader device,audio player, or other device capable of connecting to the network 1516.Such a device may have a browser module that is implemented as a modulethat uses text, graphics, audio, video, and other media to present dataand to allow interaction with data via the network 1516.

The browser module may be implemented as a combination of an all pointsaddressable display such as a cathode-ray tube (CRT), a liquid crystaldisplay (LCD), a plasma display, or other types and/or combinations ofdisplays. In addition, the browser module may be implemented tocommunicate with input devices 1512 and may also comprise software withthe appropriate interfaces which allow a user to access data through theuse of stylized screen elements such as, for example, menus, windows,dialog boxes, toolbars, and controls (for example, radio buttons, checkboxes, sliding scales, and so forth). Furthermore, the browser modulemay communicate with a set of input and output devices to receivesignals from the user.

The input device(s) may comprise a keyboard, roller ball, pen andstylus, mouse, trackball, voice recognition system, or pre-designatedswitches or buttons. The output device(s) may comprise a speaker, adisplay screen, a printer, or a voice synthesizer. In addition a touchscreen may act as a hybrid input/output device. In another embodiment, auser may interact with the system more directly such as through a systemterminal connected to the score generator without communications overthe Internet, a WAN, or LAN, or similar network.

In some embodiments, the system 1500 may comprise a physical or logicalconnection established between a remote microprocessor and a mainframehost computer for the express purpose of uploading, downloading, orviewing interactive data and databases on-line in real time. The remotemicroprocessor may be operated by an entity operating the computersystem 1500, including the client server systems or the main serversystem, an/or may be operated by one or more of the data sources 1519and/or one or more of the computing systems 1517. In some embodiments,terminal emulation software may be used on the microprocessor forparticipating in the micro-mainframe link.

In some embodiments, computing systems 1517 who are internal to anentity operating the computer system 1500 may access the emergencysituation diagnostic system module 1506 internally as an application orprocess run by the CPU 1502.

User Access Point

In an embodiment, a user access point or user interface comprises apersonal computer, a laptop computer, a tablet computer, an e-readerdevice, a cellular phone, a smartphone, a GPS system, a Blackberry®device, a portable computing device, a server, a computer workstation, alocal area network of individual computers, an interactive kiosk, apersonal digital assistant, an interactive wireless communicationsdevice, a handheld computer, an embedded computing device, an audioplayer, or the like.

Other Systems

In addition to the systems that are illustrated in FIG. 15, the network1516 may communicate with other data sources or other computing devices.The computing system 1500 may also comprise one or more internal and/orexternal data sources. In some embodiments, one or more of the datarepositories and the data sources may be implemented using a relationaldatabase, such as DB2, Sybase, Oracle, CodeBase and Microsoft® SQLServer as well as other types of databases such as, for example, a flatfile database, an entity-relationship database, and object-orienteddatabase, and/or a record-based database.

Various other modifications, adaptations, and alternative designs are ofcourse possible in light of the above teachings. Therefore, it should beunderstood at this time that within the scope of the appended claims theinvention may be practiced otherwise than as specifically describedherein. It is contemplated that various combinations or subcombinationof the specific features and aspects of the embodiments disclosed abovemay be made and still fall within one or more of the inventions.Further, the disclosure herein of any particular feature, aspect,method, property, characteristic, quality, attribute, element, or thelike in connection with an embodiment can be used in all otherembodiments set forth herein. Accordingly, it should be understood thatvarious features and aspects of the disclosed embodiments can becombined with or substituted for one another in order to form varyingmodes of the disclosed inventions. Thus, it is intended that the scopeof the present inventions herein disclosed should not be limited by theparticular disclosed embodiments described above. Moreover, while theinvention is susceptible to various modifications, and alternativeforms, specific examples thereof have been shown in the drawings and areherein described in detail. It should be understood, however, that theinvention is not to be limited to the particular forms or methodsdisclosed, but to the contrary, the invention is to cover allmodifications, equivalents, and alternatives falling within the spiritand scope of the various embodiments described and the appended claims.Any methods disclosed herein need not be performed in the order recited.The methods disclosed herein include certain actions taken by apractitioner; however, they can also include any third-party instructionof those actions, either expressly or by implication. The rangesdisclosed herein also encompass any and all overlap, sub-ranges, andcombinations thereof. Language such as “up to,” “at least,” “greaterthan,” “less than,” “between,” and the like includes the number recited.Numbers preceded by a term such as “approximately”, “about”, and“substantially” as used herein include the recited numbers (e.g., about10%=10%), and also represent an amount close to the stated amount thatstill performs a desired function or achieves a desired result. Forexample, the terms “approximately”, “about”, and “substantially” mayrefer to an amount that is within less than 10% of, within less than 5%of, within less than 1% of, within less than 0.1% of, and within lessthan 0.01% of the stated amount.

Conditional language, such as, among others, “can,” “could,” “might,” or“may,” unless specifically stated otherwise, or otherwise understoodwithin the context as used, is generally intended to convey that certainembodiments include, while other embodiments do not include, certainfeatures, elements and/or steps. Thus, such conditional language is notgenerally intended to imply that features, elements and/or steps are inany way required for one or more embodiments or that one or moreembodiments necessarily include logic for deciding, with or without userinput or prompting, whether these features, elements and/or steps areincluded or are to be performed in any particular embodiment. Theheadings used herein are for the convenience of the reader only and arenot meant to limit the scope of the inventions or claims.

What is claimed is:
 1. An aircraft flight data recorder ejection andlanding system comprising: a flight data recorder comprising electronicstorage for storing therein of at least data representative of a flightstate of an aircraft; an ejection system for rapid ejection of theflight data recorder from the aircraft, the ejection system comprising:a housing comprising an internal cavity, the flight data recorder beingpositioned at least partially within the internal cavity; an ejectionsystem pressurized fluid source; a fluid path fluidly coupled to theinternal cavity of the housing and the ejection system pressurized fluidsource; and a valve operatively coupled to the fluid path to selectivelyallow pressurized fluid to flow from the ejection system pressurizedfluid source to the internal cavity of the housing to cause ejection ofthe flight data recorder from the housing; and a landing system forreducing landing impact forces and increasing buoyancy, the landingsystem coupled to the flight data recorder, the landing systemcomprising: one or more landing system pressurized fluid sources; aplurality of inflatable airbags configured to be disposed at leastpartially about an exterior surface of the flight data recorder wheninflated, each of the plurality of inflatable airbags being selectivelyfluidly coupled to one or more of the one or more landing systempressurized fluid sources; and a trigger mechanism configured to triggerone or more landing system valves to cause inflation of the plurality ofinflatable airbags by the one or more landing system pressurized fluidsources upon occurrence of a condition, wherein the condition is basedon at least one of the following: a passage of time since ejection ofthe flight data recorder from the aircraft, detecting that the flightdata recorder has passed below a predetermined altitude, and detecting aloss of communication with the aircraft.
 2. The aircraft flight datarecorder ejection and landing system of claim 1, wherein the landingsystem further comprises: one or more descent control parachutes coupledto the flight data recorder and configured to reduce a descending rateof the flight data recorder after ejection of the flight data recorderfrom the aircraft.
 3. The aircraft flight data recorder ejection andlanding system of claim 1, further comprising: an antenna for wirelesstransmission of data from the flight data recorder to a remote device,the antenna coupled to the flight data recorder.
 4. The aircraft flightdata recorder ejection and landing system of claim 3, furthercomprising: a ballast weight coupled to the flight data recorder at afirst end of the flight data recorder, and wherein the antenna iscoupled to the flight data recorder at a second end of the flight datarecorder, the second end being opposite the first end.
 5. The aircraftflight data recorder ejection and landing system of claim 1, wherein theejection system further comprises: one or more extraction parachutescoupled to the flight data recorder.
 6. The aircraft flight datarecorder ejection and landing system of claim 2, wherein the one or moredescent control parachutes are coupled to the flight data recorder at afirst end of the flight data recorder, and wherein the plurality ofinflatable airbags comprises at least an airbag positioned at a secondend of the flight data recorder, the second end being opposite to thefirst end.
 7. The aircraft flight data recorder ejection and landingsystem of claim 6, wherein the landing system further comprises: a watersensor positioned at the second end of the flight data recorder, andwherein the airbag positioned at the second end of the flight datarecorder comprises an inflated shape having an opening through whichwater can pass to be detected by the water sensor.
 8. The aircraftflight data recorder ejection and landing system of claim 7, wherein theairbag positioned at the second end of the flight data recordercomprises an annular shape.
 9. The aircraft flight data recorderejection and landing system of claim 7, wherein the landing system isconfigured to, responsive to detection of water by the water sensor,disconnect the one or more descent control parachutes from the flightdata recorder.
 10. A method of ejecting and landing an ejectable flightdata recorder, the method comprising: monitoring a flight condition ofan aircraft; initiating, responsive to detection of an abnormal flightcondition, ejection of the flight data recorder from the aircraft,wherein the initiating comprises: transmitting at least datarepresentative of a flight state of the aircraft to the flight datarecorder; and opening a valve fluidly coupled to an ejection systempressurized fluid source, wherein opening the valve causes fluid fromthe pressurized fluid source to force the flight data recorder from ahousing; deploying a descent control parachute coupled to the flightdata recorder, the descent control parachute configured to reduce adescending rate of the flight data recorder; triggering, responsive tooccurrence of a condition, inflation of a plurality of airbags, whereinthe plurality of airbags are configured to be disposed at leastpartially about an exterior surface of the flight data recorder wheninflated; detecting a water landing of the flight data recorder; anddisconnecting the descent control parachute from the flight datarecorder, responsive to detecting the water landing.
 11. The method ofclaim 10, further comprising: transmitting, wirelessly via an antennacoupled to the flight data recorder, data to a remote device.
 12. Themethod of claim 10, wherein the initiating ejection of the flight datarecorder further comprises: deploying an extraction parachute.
 13. Themethod of claim 10, wherein the condition is based on at least one ofthe following: a passage of time since ejection of the flight datarecorder from the aircraft, detecting that the flight data recorder haspassed below a predetermined altitude, and detecting a loss ofcommunication with the aircraft.
 14. The method of claim 10, whereintriggering inflation of the plurality of airbags comprises causing atleast some of the plurality of airbags to be inflated into an annularshape.
 15. An aircraft flight data recorder ejection and landing systemcomprising: a flight data recorder comprising electronic storage forstoring therein of at least data representative of a flight state of anaircraft; an ejection system for rapid ejection of the flight datarecorder from the aircraft, the ejection system comprising: an ejectionsystem pressurized fluid source; and an ejection valve operativelycoupled to the ejection system pressurized fluid source to selectivelyallow pressurized fluid to flow from the ejection system pressurizedfluid source to an expandable cavity adjacent the flight data recorder,wherein the expandable cavity is configured such that expansion of thecavity causes the flight data recorder to be ejected from the aircraft;and a landing system for reducing landing impact forces and increasingbuoyancy, the landing system coupled to the flight data recorder, thelanding system comprising: one or more landing system pressurized fluidsources; a plurality of inflatable airbags configured to be disposedabout an exterior surface of the flight data recorder when inflated,each of the plurality of inflatable airbags being selectively fluidlycoupled to one or more of the one or more landing system pressurizedfluid sources; and a trigger mechanism configured to trigger one or moreairbag valves to cause inflation of the plurality of inflatable airbagsby the one or more landing system pressurized fluid sources.
 16. Theaircraft flight data recorder ejection and landing system of claim 15,wherein the landing system further comprises: one or more descentcontrol parachutes coupled to the flight data recorder and configured toreduce a descending rate of the flight data recorder after ejection ofthe flight data recorder from the aircraft.
 17. The aircraft flight datarecorder ejection and landing system of claim 15, wherein the triggermechanism is configured to trigger the one or more airbag valves uponoccurrence of a condition, wherein the condition is based on at leastone of the following: a passage of time since ejection of the flightdata recorder from the aircraft, detecting that the flight data recorderhas passed below a predetermined altitude, and detecting a loss ofcommunication with the aircraft.
 18. The aircraft flight data recorderejection and landing system of claim 15, wherein the ejection systemfurther comprises: one or more extraction parachutes coupled to theflight data recorder.
 19. The aircraft flight data recorder ejection andlanding system of claim 16, wherein the plurality of inflatable airbagscomprises at least: a first airbag configured to be, when inflated,positioned at an end of the flight data recorder opposite an end of theflight data recorder having the one or more descent control parachutescoupled thereto; and a second airbag configured to be, when inflated,annularly shaped and positioned about a body of the flight datarecorder.